ALERT: YOUR COMPUTER HAS BEEN HACKED !!!
YOUR FILES HAVE BEEN ENCRYPTED
Cyber~Ghosts — Incident ID: TFG-APT-4729
03:00:00
Exfiltration in progress
Shadow copies removed
Domain admin token captured
To restore access, follow the instructions sent to your
Security Operations mailbox and internal Teams channel.
Failure to comply before the deadline will result in permanent data loss.
Attention!
- Do not rename encrypted files.
- Do not try to decrypt your data using third party software.
- Decryption of your files with the help of third parties may cause increased price.