KUZA Ransomware

Ransomware KUZA je prijeteća prijetnja. Ransomware KUZA šifrira datoteke žrtava i dodaje im ekstenziju '.Ripa', ponekad također dodajući adrese e-pošte cyber kriminalaca. Nakon infekcije, KUZA Ransomware isporučuje žrtvama poruku o otkupnini pod nazivom '#Read-for-recovery.txt', tražeći plaćanje za dešifriranje. Ransomware KUZA pripada ozloglašenoj obitelji Proton Ransomware .

Ključne karakteristike KUZA Ransomwarea:

1. Enkripcija datoteka: KUZA šifrira datoteke i dodaje im ekstenziju '.Ripa' zajedno s adresom e-pošte cyber kriminalaca za kontakt.
2. Poruka o otkupnini: Žrtve primaju poruku o otkupnini pod nazivom '#Read-for-recovery.txt' kako bi pokrenule kontakt za plaćanje i dešifriranje.
3. Kontakt detalji: Cyberkriminalci daju dvije adrese e-pošte za komunikaciju: amir206amiri2065sa@gmail.com i amir206amiri2065sa@tutamail.com.
4. Vektori infekcije: Ransomware KUZA može se infiltrirati u računala putem lažnih oglasa, torrent web stranica ili zaraženih privitaka e-pošte koji sadrže makronaredbe.

Zaštita od KUZA Ransomwarea:

Za zaštitu od KUZA-e i sličnih ransomware prijetnji:

• Budite oprezni s privicima e-pošte: izbjegavajte otvaranje sumnjivih privitaka, osobito od nepoznatih pošiljatelja.
• Budite oprezni s torrentima i oglasima: Suzdržite se od preuzimanja softvera ili klikanja na oglase iz nepouzdanih izvora.
• Implementirajte sigurnosni softver: Instalirajte renomirani anti-malware softver i ažurirajte ga kako biste otkrili i spriječili napade ransomwarea.

KUZA Ransomware naglašava kritičnu potrebu za učinkovitim mjerama kibernetičke sigurnosti za ublažavanje rizika od gubitka podataka i financijske štete.

Poruka o otkupnini koju će dobiti žrtve KUZA Ransomwarea glasi:

'~~~ KUZA ~~~
>>> What happened?
We encrypted and stolen all of your files.
We use AES and ECC algorithms.
Nobody can recover your files without our decryption service.

>>> How to recover?
We are not a politically motivated group and we want nothing more than money.
If you pay, we will provide you with decryption software and destroy the stolen data.

>>> What guarantees?
You can send us an unimportant file less than 1 MG, We decrypt it as guarantee.
If we do not send you the decryption software or delete stolen data, no one will pay us in future so we will keep our promise.

>>> How to contact us?
Our email address: amir206amiri2065sa@gmail.com
In case of no answer within 24 hours, contact to this email: amir206amiri2065sa@tutamail.com
Write your personal ID in the subject of the email.

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
>>>>> Your personal ID: - <<<<<
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

>>> Warnings!
- Do not go to recovery companies, they are just middlemen who will make money off you and cheat you.
They secretly negotiate with us, buy decryption software and will sell it to you many times more expensive or they will simply scam you.
- Do not hesitate for a long time. The faster you pay, the lower the price.
- Do not delete or modify encrypted files, it will lead to problems with decryption of files.'