@bartblaze Thanks Bart, the screen for this ransomware looks like this? ->pic.twitter.com/59rtHq4Dm2
XTBL #ransomware, aka Shade, #Troldesh or more generically Filecoder is back.
Mail to: "freetibet@india.com".
IOCs:https://otx.alienvault.com/pulse/56f3f5ab67db8c7e7162cdc6/ …
-
-
-
@bartblaze here is a recent info for#Troldesh:https://twitter.com/nyxbone/status/712899856369631232 …
- Show replies
New conversation -
-
-
@bartblaze That sample is from the same family as this: https://twitter.com/malwrhunterteam/status/709400774112124929 … Shade is this: https://twitter.com/malwrhunterteam/status/711150221137461248 … cc@BleepinComputer -
@bartblaze@BleepinComputer So the one I know as Shade (https://securelist.com/analysis/publications/72087/the-shade-encryptor-a-double-threat/ …) is not the same as your sample.@DanielGallagher@nyxbone - Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.