Mortar — Ransom Notes

These are the actual ransom notes used by the mortar ransomware group when communicating with victims. Ransom notes are left on compromised systems to inform victims of the attack and provide instructions for payment. Studying these notes helps security professionals understand threat actor tactics and communication patterns.

Disclaimer: These notes are displayed for educational and research purposes only. The URLs and contact methods mentioned in these notes are operated by criminal organizations. Do not interact with them. Source: Ransomware.live

-------------------------------------------- | What happened to your files? -------------------------------------------- We breached your corporate network and encrypted the data on your computers. The encrypted data includes documents, databases, photos and more - all were encrypted using a military grade encryption algorithms (AES-256 and RSA-2048). You cannot access those files right now. But don't worry! You can still get those files back and be up and running again in no time. --------------------------------------------- | How to contact us to get your files back? --------------------------------------------- The only way to restore your files is by purchasing a decryption tool loaded with a private key we created specifically for your network. Once run on an effected computer, the tool will decrypt all encrypted files - and you can resume day-to-day operations, preferably with better cyber security in mind. If you are interested in purchasing the decryption tool contact us at http://hpo7htcpddfanilknttsymttzfr4usxwjycjpazkleggnvry5bngszyd.onion. !IMPORTANT! TO RESTORE YOUR FILES CONTACT US VIA TOR BROWSER WEBSITE: http://hpo7htcpddfanilknttsymttzfr4usxwjycjpazkleggnvry5bngszyd.onion USERNAME: [snip] PASSWORD: [snip] BACKUP LINK TO SUPPORT TEAM: http://hpo7htcpddfanilknttsymttzfr4usxwjycjpazkleggnvry5bngszyd.onion !!!!!!!!!!!