WhiteHorse Ransomware

▤ Summary

The threat is equipped with a strong encryption routine that uses an uncrackable cryptographic algorithm to lock the victims files. The goal of the hackers is to then demand a ransom in exchange for providing the necessary decryption key and tool that can restore the data. They now threaten to either sell the collected information or release it freely on the Darknet, if the victims do not establish contact within the first 72 hours following the attack. The full text of WhiteHorse Ransomwares note is: Hello my dear friend Unfortunately for you, a major IT security weakness left you open to attack, your files have been encrypted If you want to restore them, install ICQ software on your PC hxxps://icq.com/windows/ or on your mobile phone search in Appstore / Google market ICQ Write to our ICQ @Whitehorsedecryption hxxps://icq.im/Whitehorsedecryption Skype Whitehorsedecryption Attention! We give all guarantees of your files decryption IF WE DONT SEE MESSAGES FROM YOU IN 72 HOURS - WE WILL SELL YOUR DATABASES AND IMPORTANT INFORMATION TO YOUR COMPETITORS,AFTER YOU WILL SEE IT AT OPEN SOURCE AND DARKNET tell your unique ID.

▦ Linked Companies

EnigmaSoft

$1M to $5M