Toffee on Twitter: "New Crypt12 .NET ransomware uses filename.extension=id=email.crypt12 extension format. Has GUI to encrypt. Changes wallpaper to second image… https://t.co/PFGiMs4Khm"

Country	Code	For customers of
United States	40404	(any)
Canada	21212	(any)
United Kingdom	86444	Vodafone, Orange, 3, O2
Brazil	40404	Nextel, TIM
Haiti	40404	Digicel, Voila
Ireland	51210	Vodafone, O2
India	53000	Bharti Airtel, Videocon, Reliance
Indonesia	89887	AXIS, 3, Telkomsel, Indosat, XL Axiata
Italy	4880804	Wind
3424486444	Vodafone
» See SMS short codes for other countries

1. Toffee‏ @PolarToffee 15 Aug 2017
  Replying to @PolarToffee
  
  Hash: fdadc123d5739afac19247e4d9418eae Probably used in manual attacks. If anyone is hit, they can contact @demonslay335 for a decrypter :)
  
  3 retweets 5 likes
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo
1. Toffee‏ @PolarToffee 15 Aug 2017
  If you mean the start panel in the picture, yes.
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo
1. Amigo-A‏ @Amigo_A_ 16 Aug 2017
  Replying to @PolarToffee
  
  add in Digest as Crypt12 Ransomware https://id-ransomware.blogspot.ru/2017/08/crypt12-ransomware.html …
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo
1. yassine lemmou‏ @yassine_lemmou 16 Aug 2017
  Replying to @PolarToffee @malwrhunterteam
  
  it shows names of encrypted target files like #CryptoLocker, i think in infection process after each encryption writes names inside a file
  Thanks. Twitter will use this to make your timeline better. Undo
  
  Undo

Loading seems to be taking a while.

Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.