Eking (VoidCrypt) 勒索軟件
Eking 是一種新的勒索軟件變種的名稱,它基於 VoidCrypt 勒索軟件代碼。
對於已建立的 VoidCrypt 公式,Eking 幾乎沒有做任何新的事情。它將加密受害者係統上的大多數文件,打亂它們的內容並使它們不可讀。
加密文件將收到一個由受害者 ID 字符串、Eking 操作員使用的電子郵件和字符串“.eking”組成的多部分新擴展名。這會將名為“dociment.doc”的文件轉換為“document.doc.[ID 字符串](ekingm2023@outlook.com).eking”。
勒索軟件將其勒索要求放入名為“INFO.txt”的文件中。完整的註釋如下:
Your Files Are Has Been Locked
Your Files Has Been Encrypted with cryptography Algorithm
If You Need Your Files And They are Important to You, Dont be shy Send Me an Email
Send Test File + The Key File on Your System (File Exist in C:/ProgramData example : RSAKEY-SE-24r6t523 pr RSAKEY.KEY) to Make Sure Your Files Can be Restored
Get Decryption Tool + RSA Key AND Instruction For Decryption Process
Attention:
1- Do Not Rename or Modify The Files (You May loose That file)
2- Do Not Try To Use 3rd Party Apps or Recovery Tools ( if You want to do that make an copy from Files and try on them and Waste Your time )
3-Do not Reinstall Operation System(Windows) You may loose the key File and Loose Your Files
Your Case ID :-
OUR Email :ekingm2023 at outlook dot com
in Case of no answer: ekingm2023 at onionmail dot org





