Just days after the creators of the Cryptomix ransomware came out with a new variant, another was issued that again changed the extension on the encrypited files.
This time around the new variant adds the .server extension and has a new list of contact email is included, according to Bleeping Computer. The email addresses listed on the plain text ransom note are: [email protected], [email protected], [email protected], [email protected], or [email protected]
Otherwise the ransomware behaves as before and Bleeping Computer noted there is no decryptor so the only protection is to practice solid cybersecurity hygiene and back up files.
A variant with similar changes was reported on Dec. 28.
