Ransomware note ransomware-note
ransomware-note Fog .txt readme.txt note-fog-readme-txt Ransomware note Fog — readme.txt

Archived note body

Plain text · original whitespace retained

Source and hash

If you are reading this, then you have been the victim of a cyber attack. We call ourselves Fog and we take responsibility for this incident. We are the ones who encrypted your data and also copied some of it to our internal resource. The sooner you contact us, the sooner we can resolve this incident and get you back to work. 
To contact us you need to have Tor browser installed: 

1. Follow this link: xql562evsy7njcsngacphc2erzjfecwotdkobn3m4uxu2gtqh26newid.onion
2. Enter the code: [snip]
3. Now we can communicate safely. 

If you are decision-maker, you will get all the details when you get in touch. We are waiting for you.

Related negotiation records

View all 6 records

An explicit alias maps the note family Fog to the Ransomchats actor label fog. This relationship does not merge either corpus or its statistics.

Up to ten negotiation records from the mapped actor collection
Record IDIndexed dateMessagesThreat actor
20241119 Nov 19, 2024 3 fog
20240927 Sep 27, 2024 60 fog
20240910 Sep 10, 2024 26 fog
20240830 Aug 30, 2024 73 fog
20240729 Jul 29, 2024 144 fog
20240517 May 17, 2024 27 fog