Just days after the creators of the Cryptomix ransomware came out with a new variant, another was issued that again changed the extension on the encrypited files.
This time around the new variant adds the .server extension and has a new list of contact email is included, according to Bleeping Computer. The email addresses listed on the plain text ransom note are: email@example.com, firstname.lastname@example.org, email@example.com, firstname.lastname@example.org, or email@example.com
Otherwise the ransomware behaves as before and Bleeping Computer noted there is no decryptor so the only protection is to practice solid cybersecurity hygiene and back up files.
A variant with similar changes was reported on Dec. 28.