Hello! here in Argentinian .spfre ransomware (Press Ransomware)

Hello world
 
I like to know more about press ransomware and I'm here to share my experience and know more.
 
RECOVERY NFO.txt
 
 

Hello! 
 
We're sorry, but your data are stolen and encrypted.
In case of nonpayment - all sensitive information will be sold or made publicly accessible.
Compared to other ransomware we charge a lot less, so don't be stingy!
If you pay - we will provide you with decryption software and remove your data from our servers. We work honesty!   
Warning! Do not delete or modify any files, it can lead to recovery problems!
 
You can contact us using TOX messenger without registration and SMS hxxps://tox.chat/download.html
Tox ID:  
 
 
Send us your KeyID and 2 files with SIMPLE extensions(jpg,xls,doc, etc... not databases!) and low sizes(max 2 mb) for free decryption.
        Use hxxps://ufile.io
 
Good luck!
 
 
Key Identifier: 
LolQ21b

Edited by quietman7, 27 March 2024 - 03:03 PM.
Put quotebox around quoted material - Hamluis. Deactivated links. ~ OB

Any files that are encrypted with Press Ransomware will have an .press, .dwarf, .spfre extension appended to the end of the encrypted data filename and typically leave files (ransom notes) named RECOVERY NFO.txt as explained here by Amigo-A (Andrew Ivanov).
 
rivitna (Andrey Zhdanov) may be able to help victims but you need to contact him privately.

If you have become a victim of this ransomware, write to me PM.

 
There is an ongoing discussion in this topic where victims can post comments, ask questions and seek further assistance. Other victims have been directed there to share information, experiences and suggestions.

• Press Ransomware (.press, .spfre; RECOVERY NFO.txt) Support Topic

Rather than have everyone with individual topics, it would be best (and more manageable for staff) if you posted any more questions, comments or requests for assistance in the above support topic discussion...it includes experiences by experts, IT consultants, victims and company representatives who have been affected by ransomware infections. To avoid unnecessary confusion, this topic is closed.
 
Thanks
The BC Staff