PurpleCrypt0r Ransomware; Extension: .purple; Ransom note: readme.txt virustotal.com/gui/file/3b009… Lawrence Abrams Michael Gillespie Karsten Hahn Jakub Kroustek

Venere Ransomware; MedusaLocker ransomware family; Extension: .Venere1; Ransom note: UFFIZI_README.html; Changes desktop wallpaper virustotal.com/gui/file/56c11… Lawrence Abrams Michael Gillespie Karsten Hahn Jakub Kroustek

ICanFix Ransomware; MedusaLocker ransomware family; Extension: .icanfix; Ransom note: READ_NOTE.html; Changes desktop wallpaper virustotal.com/gui/file/06256… Lawrence Abrams Michael Gillespie Karsten Hahn Jakub Kroustek

Ransoomed Ransomware; Extension: .ransoomed; Ransom note: !!!READ_ME!!!.txt and pop-up window virustotal.com/gui/file/3792a… Lawrence Abrams Michael Gillespie Karsten Hahn Jakub Kroustek

EagleLocker Ransomware; Extension: .daibang; Ransom notes: pop-up window and desktop wallpaper virustotal.com/gui/file/84926… Lawrence Abrams Michael Gillespie Karsten Hahn Jakub Kroustek

Cdd Ransomware; Makop ransomware family; Extension: .cdd (also appends filenames with victim's ID and developers' email address); Ransom note: +README-WARNING+.txt; Changes desktop wallpaper virustotal.com/gui/file/2f952… Lawrence Abrams Michael Gillespie Karsten Hahn Jakub Kroustek

LOCKED_X Ransomware; Replaces original file extension to .LOCKED_X; Ransom note: READ_ME.txt virustotal.com/gui/file/e2abc… Lawrence Abrams Michael Gillespie Karsten Hahn Jakub Kroustek

Ndm448 Ransomware; Makop family; Extension: .ndm488 (filenames are also appended with victim's ID and developers' email address); Ransom note: +README-WARNING+.txt; Changes desktop wallpaper virustotal.com/gui/file/584dd… Lawrence Abrams Michael Gillespie Karsten Hahn Jakub Kroustek

Open Ransomware; Renames files to random strings with .open extension; Ransom notes: READ-ME.txt and desktop wallpaper virustotal.com/gui/file/9ea45… Lawrence Abrams Michael Gillespie Karsten Hahn Jakub Kroustek

MackDEV Ransomware; Extension: .MackDEV; Ransom note: MackDEV_README.txt virustotal.com/gui/file/5d92c… Lawrence Abrams Michael Gillespie Karsten Hahn Jakub Kroustek

IdontCareLOck Ransomware; Extension: .IdontCareLOck; Ransom notes: desktop wallpaper and IdontCareLOck.txt virustotal.com/gui/file/bae48… Lawrence Abrams Michael Gillespie Karsten Hahn Jakub Kroustek

End (MedusaLocker) Ransomware; Extension: .end11 (the number may differ); Ransom note: HOW_TO_RECOVER_DATA.html virustotal.com/gui/file/d3873… Lawrence Abrams Michael Gillespie Karsten Hahn Jakub Kroustek

ZETARINK Ransomware; Extension: .ZETARINK[random_string]; Ransom notes: ZETARINK[random_string]-HOW-TO-DECRYPT.txt and desktop wallpaper virustotal.com/gui/file/904ce… Lawrence Abrams Michael Gillespie Karsten Hahn Jakub Kroustek

Chip (MedusaLocker) Ransomware; Extension: .chip1 (the number may differ); Ransom note: Recovery_README.html; Changes desktop wallpaper virustotal.com/gui/file/41211… Lawrence Abrams Michael Gillespie Karsten Hahn Jakub Kroustek

BuP1w (Ran$omClub) Ransomware; Extension: .BuP!w3; Ransom notes: desktop wallpaper and [email protected] virustotal.com/gui/file/581df… Lawrence Abrams Michael Gillespie Karsten Hahn Jakub Kroustek

Strike Ransomware; MedusaLocker ransomware family; Extension: .strike7 (the number may differ); Ransom note: READ_NOTE.html virustotal.com/gui/file/1d9a4… Lawrence Abrams Michael Gillespie Karsten Hahn Jakub Kroustek

Payload Ransomware; Extension: .payload; Ransom note: RECOVER_payload.txt virustotal.com/gui/file/1ca67… Lawrence Abrams Michael Gillespie Karsten Hahn Jakub Kroustek

Cortizol Ransomware; Extension: -id-[victim's_ID][[email protected]].Cortizol; Ransom note: HOW_TO_RECOVER.txt and desktop wallpaper virustotal.com/gui/file/75068… Lawrence Abrams Michael Gillespie Karsten Hahn Jakub Kroustek