Has anyone met these ransomware [decryptoperator@qq.com]?

[AntonioAlib]

Has anyone met these ransomware decryptoperator@qq.com?

They encrypted my servers. I wrote them the mail [decryptoperator@qq.com] that was listed on my server. They demanded $ 4,000 from me. This is a very large amount but I paid it. They promised me to return my files of the servers and unlock my servers. After payment they unlocked only two files and demanded another $ 6,000 to unlock the remaining files.
In another forum I saw a similar story. After payment these guys will demand more money but they will not unlock it. Who came across these extortionists? How to get my servers back? How to return files?

 

[nasdaq]

Hello, Welcome to MalwareTips.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

These extortionists will do anything do anything get your money.

Navigate to this topic.

ID Ransomware

Upload a ransom note and/or sample encrypted file to identify the ransomware that has encrypted your data.

id-ransomware.malwarehunterteam.com

Submit a sample of the compromised files for their review.
They will reply and let you know what you are dealing with.

From what we know now, your files are not recoverable.
Your only solution would be to restore the files from a good backup if you have one.

The compromised files can be transferred to a CD or Flash drive.
Should a solution be found in the future you may be able to restore them.

Good luck.
<<<>>>

 

[DenVali]

These scammers encrypted my server too. The same mail [decryptoperator@qq.com] was on the banner on my server.
He demanded $ 7,000 from me. I paid it, but after receiving the money he stopped responding to me.

 

[nasdaq]

@ DenVali check your post.

 

[[correlate]]

You should check your servers to eliminate malicious files using protection programs
- Go to the following site where you will find some decryption programs

http://hxxttps://www.nomoreransom.org/ar/index.html