hello. This is White Defender.

Ransomware can be dealt with if you prevent it in advance.
White Defender is an anti-ransomware solution that can protect against ransomware in real time. thank you안녕하세요. 화이트디펜더입니다.

whitedefender video

This is a video of White Defender responding to ransomware threats.

title
LostInfo ransomware
Registration date
2024-07-29
type
Ransomware
Treatment method
Diagnosis/treatment is possible with WhiteDefender.
change extension
File name.Extension.{PersonalUUID}.lostinfo
ransom note
 
 

What is LostInfo Ransomware?
The malware analyzed by WhiteDefender, which is researching and developing ransomware security, is LostInfo ransomware.
LostInfo ransomware encrypts all file data and makes it inaccessible. For example, a file named "photo.jpg" will be changed to "photo.jpg.{personalUUID}.lostinfo", and "sales.xlsx" will be changed to "sales.xlsx.{personalUUID}.lostinfo".
Once this attack process is complete, a ransom note with the title "README.TXT" will be created in all directories containing the file.
This ransom note explains how to purchase a decryption tool or contact the attackers.


Ransom Note (Ransom Note) Overview
When you open the README.TXT file, you will be notified that the file has been encrypted. If you want to decrypt it, don`t ask a third party to do it. If you contact us within 12 hours, they will give you a 50% discount. They also threaten to share encrypted files with other cybercriminals if a ransom is not paid.

 

Ransomware name LostInfo ransomware
Changed extension File name.Extension.{PersonalUUID}.lostinfo
Ransom note (payment information file) README.TXT
characteristic Demand money after encrypting all file data
MD5 2eb4c4496ce075d5885d74d9273d43b9
SHA-1 5e11fdb2d0e0a646ef8a1b29b648eef2c5b554a2
SHA-256 6718cb66521a678274e5672285bf208eac375827d622edcf1fe7eba7e7aa65e0
Basic protection method The most basic and effective protection method
is to use a reliable anti-ransomware program.
Keep your security software up to date.

 

Previous post
Project ransomware
next post
Afire Ransomware Afire
Everyzone White Defender Co., Ltd. | CEO: Seunggyun Hong|Business registration number: 220-81-67981
Copyright ⓒEveryzone , Inc. All Rights Reserved.|