DEADBOLT

WARNING: Your files have been locked by DEADBOLT

> What happened?

All your files have been encrypted. This includes (but is not limited to) Photos, Documents and Spreadsheets.

> Why Me?

This is not a personal attack. You have been targeted because of the inadequate security provided by your product vendor (QNAP).

> What now?

You can make a payment of (exactly) 0.050000 bitcoin to the following address:
bc1qkjst0xufn90z5nm6tyddclhh356aje6983gav6

Once the payment has been made we'll follow up with a transaction to the same address, this transaction will include the decryption key as part of the transaction details. [more information..]

You can enter the decryption key below to start the decryption process and get access to all your files again.


important message for QNAP


 

⚠ī¸ Important Message for QNAP ⚠ī¸

All your affected customers have been targeted using a zero-day vulnerability in your product. We offer you two options to mitigate this (and future) damage:

1) Make a bitcoin payment of 10 BTC to bc1qnju697uc83w5u3ykw7luujzupfyf82t6trlnd8:

You will receive all details about this zero-day vulnerability so it can be patched. A detailed report will be sent to security@qnap.com.

2) Make a bitcoin payment of 50 BTC to bc1qnju697uc83w5u3ykw7luujzupfyf82t6trlnd8:

You will receive a universal decryption master key (and instructions) that can be used to unlock all your clients their files. Additionally, we will also send you all details about the zero-day vulnerability to security@qnap.com.

Upon receipt of payment for either option, all information will be sent to you in a timely fashion.

There is no way to contact us.
These are our only offers.
Thanks for your consideration.

Kind regards,
the DEADBOLT team.

🔑 Retrieving Decryption Key 🔓

The DEADBOLT decryption key delivery process is 100% transparent and honest.

The decryption key will be delivered to the bitcoin blockchain inside the OP_RETURN code. You can retrieve it by monitoring the address you made your payment to for new transactions containing the OP_RETURN code. An easy way to do this is using a public blockchain explorer like blockchain.com.


example of decryption key as found on blockchain.com explorer.

The decryption key always has an exact length of 32 characters.

Entering the wrong decryption key will not harm your files. This page will tell you if the entered key is invalid.

After the decryption has finished successfully, this page will disappear and you can access the management interface again. However, it is strongly advised to migrate all your data to a more secure platform.

If you have any concerns about the legitimacy of the DEADBOLT software and are afraid of getting scammed/not getting your data back; please consult Google. Many have successfully purchased working decryption keys from us and have gotten all their data back.

ℹī¸ If you struggle with this process, please contact an IT professional to help you!