So it looks like the computer network at my workplace got hacked. It's just a medium sized business (about a hundred employees), but still got targeted by some thief. The hacker left a lengthy message on every desktop in a plain text file mentioning that data was stolen and encrypted. He's threatening to post this data on the darkweb if a ransom is not paid. He's listing all the advantages of paying the ransom, and also the consequences of not paying. I looked at a few files, and some of them, like jpg, doc, txt and others got encrypted indeed... pure garbage in those files now. I saw a exe file which was untouched. I don't have access to the whole network, I'm not the IT guy. The files which were affected have now the "randombits" file extension at the end of the original filename. The hacker said he's part of a famous ransomware group, and he also mentioned that he is not politically motivated, he just wants money. He only gave an email address to contact him, and he said replies might come a little late because the group is very busy attacking other businesses. So no computers are working at my workplace now, which sucks. Windows 10 Pro was being used. Windows still boots, but it seems kinda broken. Anybody ever seen a similar situation?
