WIN2019 周一上班发现系统挂了，上面起来 10 多个 VM 装的 openshif，看起来有重装了

[oriyao]

SOMETHING WENT WRONG, PLEASE CONTACT YOUR SYSTEM ADMINISTRATOR!

He can help you to understand whats happened. If he can't help you, contact us via email:

[email protected] [email protected]

HURRY UP! WE HAVE ANTIDOTE FOR YOUR FILES! DISCOUNT 20% FOR CLIENTS, WHO CONTACT US IN THE SAME DAY!

You can attach 2 files (text or picture) to check our honest intentions, we will heal them and send back.

---

QUESTIONNAIRE

We can help you to avoid same issues in future, after heal we will provide advice how to fix security issues on your network.

[oriyao]

低格了硬盘，重组了 raid，开始装 WIN2019...这病毒中的真是时候

[wtof]

Hermes837 好像是这个勒索病毒

[wtof]

据说是暴力破解远程桌面手工投毒的，最好还是换下密码吧

[wtof]

参考 https://www.360.cn/n/11630.html

[oriyao]

@wtof 感谢，已禁用 Admin