Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Generic User Avatar

Makop-Oled Ransonware (.makop, .origami, .tomas, .zbw. mkp) Support Topic


  • Please log in to reply
161 replies to this topic

#31 bdft

bdft

  •  Avatar image
  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:03:16 PM

Posted 21 March 2020 - 07:35 PM

Ok i'll try with stellar first... I hope it work...
Why your forum and mail address was in text file?

BC AdBot (Login to Remove)

 


#32 bdft

bdft

  •  Avatar image
  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:03:16 PM

Posted 22 March 2020 - 01:56 AM

Hey guys... all my backup was deleted by hackers.... i want to die...

I sent a message on the two mails but I have no answers

established01@protonmail.com, fargodrops@cock.li

Any help ?...



#33 Pintosaurio

Pintosaurio

  •  Avatar image
  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:03:16 PM

Posted 08 April 2020 - 01:20 PM

Hello, my files have been encrypted by the same ramsonware, extension .makop.
Can it be decrypted? I have very important things and I don't have a backup.
Thank you.


#34 quietman7

quietman7

    Bleepin' Gumshoe


  •  Avatar image
  • Global Moderator
  • 62,740 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:08:16 AM

Posted 08 April 2020 - 04:12 PM

There is no known method that I am aware of to decrypt files encrypted by Makop-Oled Ransonware without paying the ransom and obtaining the private keys from the criminals who created the ransomware unless they are leaked or seized & released by authorities. Without the master private RSA key that can be used to decrypt your files, decryption is impossible. That usually means the key is unique (specific) for each victim and generated in a secure way that cannot be brute-forced as noted here by Demonslay335.


.
.
Microsoft MVP Alumni 2023Windows Insider MVP 2017-2020, MVP Reconnect 2016-2023

Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators
Retired Police Officer, Federal Agent and Coast Guard Chief

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif


#35 guillaume_martel

guillaume_martel

  •  Avatar image
  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:03:16 PM

Posted 20 April 2020 - 05:10 PM

Hi everyone,

 

I want to share my experience with this ransomware Makop, and especially with hackers.

(No backup, No restore possibility.)

 

After they hack us, and the file crypt, I contact the hackers to this email : antiransomware@aol.com

Extremly reactive (< 10 minutes for a response)

 

After conversation by email, we negociate a price. I know the risk, but I payd...

 

I'm now waiting for decoder and I will let you know if I receive the tools with the key. Could be usefull for futur victims...



#36 Demonslay335

Demonslay335

    Ransomware Hunter


  •  Avatar image
  • Security Colleague
  • 4,770 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:07:16 AM

Posted 20 April 2020 - 05:12 PM

Hi everyone,

 

I want to share my experience with this ransomware Makop, and especially with hackers.

(No backup, No restore possibility.)

 

After they hack us, and the file crypt, I contact the hackers to this email : antiransomware@aol.com

Extremly reactive (< 10 minutes for a response)

 

After conversation by email, we negociate a price. I know the risk, but I payd...

 

I'm now waiting for decoder and I will let you know if I receive the tools with the key. Could be usefull for futur victims...

 

The keys are unique per victim, so it won't help anyone else...


logo-25.pngID Ransomware - Identify What Ransomware Encrypted Your Files [Support Topic]

ransomnotecleaner-25.png RansomNoteCleaner - Remove Ransom Notes Left Behind [Support Topic]

cryptosearch-25.pngCryptoSearch - Find Files Encrypted by Ransomware [Support Topic]

If I have helped you and you wish to support my ransomware fighting, you may support me here.


#37 guillaume_martel

guillaume_martel

  •  Avatar image
  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:03:16 PM

Posted 20 April 2020 - 05:19 PM

Yes, I know the keys are unique.

 

My goal is to inform other victims, who have no other solution than pay... 

 

I want they know if the hackers can be "trust" for recovered data (everyone make is own choice, with all know of the risk. we agreed with that)



#38 Hotman99

Hotman99

  •  Avatar image
  • Members
  • 43 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey
  • Local time:02:16 PM

Posted 20 April 2020 - 07:27 PM

Yes, I know the keys are unique.

 

My goal is to inform other victims, who have no other solution than pay... 

 

I want they know if the hackers can be "trust" for recovered data (everyone make is own choice, with all know of the risk. we agreed with that)

 

 

Did he give you the key?



#39 guillaume_martel

guillaume_martel

  •  Avatar image
  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:03:16 PM

Posted 21 April 2020 - 02:33 AM

Not for the moment.



#40 Hotman99

Hotman99

  •  Avatar image
  • Members
  • 43 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey
  • Local time:02:16 PM

Posted 21 April 2020 - 03:15 AM

Not for the moment.

Apart from mail, the ransom has telegram. If you want, you can request it from there. I'll take the key too, but if it returns to you, I'm ready to take it.

 

telegram username;

 

@burnofin



#41 guillaume_martel

guillaume_martel

  •  Avatar image
  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:03:16 PM

Posted 21 April 2020 - 04:46 AM

Ok thanks for the information.

 

Did you also payed ?



#42 spoul

spoul

  •  Avatar image
  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:03:16 PM

Posted 21 April 2020 - 04:48 AM

I'm interesting with you issue. I'm currently deal with hackers, but didnt payed yet. I wait for your return.



#43 Hotman99

Hotman99

  •  Avatar image
  • Members
  • 43 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey
  • Local time:02:16 PM

Posted 21 April 2020 - 07:41 AM

I'm interesting with you issue. I'm currently deal with hackers, but didnt payed yet. I wait for your return.

 

 

Ok thanks for the information.

 

Did you also payed ?

 

 

Yes, I got the password and the opening process is going on.



#44 guillaume_martel

guillaume_martel

  •  Avatar image
  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:03:16 PM

Posted 21 April 2020 - 09:29 AM

Still dont receive the key, and no response from them.

So, even if you paid you won't get back your files (that's a risk I know).

 

Dont make the same mistake.



#45 Hotman99

Hotman99

  •  Avatar image
  • Members
  • 43 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey
  • Local time:02:16 PM

Posted 21 April 2020 - 10:51 AM

Rules are available for a six-hour $ 700 fee. You have exceeded time. If you pay $ 300 more, my friend will give you the key. That's the rules. I got the key and opened my files.




1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users