The appoint of the filing cabinet will likewise be rename by write in code the filing cabinet epithet , encoding it by base64 , encode it by URL and last sum up the annex to the data file name.rontok . Since a try out of the ransomware was not get hold , there represent piffling early selective information than what we knowing from the lodge defer and the payment locate . This inscribe site was extend on Ubuntu 16.04 and all its register were encrypt , rename and attached to them by the.rontok lengthiness . An representative of the cite of an encipher single file is zmAAwbbilFw69b7ag4G4bQ%3D%3D.rontok If B0r0nt0 K encrypt a file away , it will base64 the cypher data point as usher below , grant to Michael Gillespie .
nonetheless , the developer seem volition to talk terms the cost . Although the exploiter could not bring home the bacon a ransom remark , he could furnish the defrayment site ’s uniform resource locator at hypertext transfer protocol / borontok.uk . The redeem require in this peculiar character was 20 bitcoins , which is presently about $ 75,000 . once an ID is enroll , the substance abuser will meet a defrayment foliate that admit the measure of the bitcoin ransom money , the bitcoin defrayment accost and the netmail info@botontok.uk that can be ill-used to liaison the developer . The user will be ask to put in his personal recognition when visiting this locate .
Although this may argue that the developer is Annamese , it is by no think of validation . as well , anyone can visualise the cyber-terrorist implant notice “ Vietnamese Hacker ” when canvass the origin inscribe for the payment site .
ikon deferred payment : bleep computer