Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Ransom Note: message.txt

Group: Orova

Your company is under attack and the entire system is encrypted.

We have downloaded all the company's confidential data.

You must contact us within 72 hours to recover your data and prevent data leakage.

Contact us for price and get decryption software.

1. Type the address "https://www.torproject.org" in your Internet browser.
2. Press "Download Tor Browser", install and run it.
3. Open our website: http://ns7y6bxawualjj5rpo5num6syejd7hgaowrndk3r4duxu2iyinzv6hid.onion
4. Put the login code: ******************

DON'T TRY TO RECOVER OR MODIFY ANY FILES BY YOURSELF, IT WILL MAKE IMPOSSIBLE YOUR FILES TO RESTORE FOREVER.

If you refuse to communicate with us and we do not come to an agreement, your data will be reviewed and published on our blog.

Blog link: http://mll5ddmdzgiq2siv3qnocmmqyiigfpajtc663xtf32qtp6weycyx2hyd.onion


Indicators of Compromise
Type IOC
onion url http://mll5ddmdzgiq2siv3qnocmmqyiigfpajtc663xtf32qtp6weycyx2hyd.onion
onion url http://ns7y6bxawualjj5rpo5num6syejd7hgaowrndk3r4duxu2iyinzv6hid.onion