Lawrence Abrams on Twitter: "Hacked Ransomware. Appends .hacked and includes ransom notes in Italian, English, Spanish, and Turkish. Pretends to be a windows update.… https://t.co/MNUkm1vKXT"

@LawrenceAbrams

Ransomware, Online Security, and Malware. Owner, Editor in Chief of @bleepincomputer. Signal: (646) 961-3731 Jabber: lawrence.abrams@anonym.im

New York

Country	Code	For customers of
United States	40404	(any)
Canada	21212	(any)
United Kingdom	86444	Vodafone, Orange, 3, O2
Brazil	40404	Nextel, TIM
Haiti	40404	Digicel, Voila
Ireland	51210	Vodafone, O2
India	53000	Bharti Airtel, Videocon, Reliance
Indonesia	89887	AXIS, 3, Telkomsel, Indosat, XL Axiata
Italy	4880804	Wind
3424486444	Vodafone
» See SMS short codes for other countries

1. Lawrence Abrams‏Verified account @LawrenceAbrams 6 Sep 2017
  Ransomware is dangerous. Has a button where you can enter a private key, even if wrong, and decrypt. If wrong key entered...
  
  3 likes
  
  Show this thread
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo
1. Lawrence Abrams‏Verified account @LawrenceAbrams 6 Sep 2017
  Numerous ransom notes created. Sample: https://www.virustotal.com/#/file/ed5653170b8a8b65e9d3e6ba355a4ffd76903c84cb0dbd63e7700e4ce9dc0651/detection …pic.twitter.com/vSnQ6Hfxwz
  
  1 reply 1 retweet 1 like
  
  Show this thread
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo
1. Amigo-A‏ @Amigo_A_ 6 Sep 2017
  Replying to @LawrenceAbrams
  
  Sorry. Here are two notes in English. The Turkish note is not presented.
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo
1. Amigo-A‏ @Amigo_A_ 7 Sep 2017
  Replying to @LawrenceAbrams
  
  Thanks!
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo
1. tarunidhar‏ @tarunidhar 7 Sep 2017
  Replying to @LawrenceAbrams
  
  Q: what are the windows Api calls or processes will ransomwares request to encrypt files? Point me to a page/blog if possible...
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo
1. • Aye •‏ @cyb3rhusky 7 Sep 2017
  Replying to @LawrenceAbrams
  
  Another sample: https://www.virustotal.com/#/file/c964fc55c775ed77d5b6a30d44d5a35b50a94fbdab78afa0d359ba5cde14e49d/detection …
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo
1. LeagueHerald‏ @LeagueHerald 8 Sep 2017
  Replying to @LawrenceAbrams
  
  Any other site hosting the sample? Don't have a VTI private key :(
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo