FindZip (OSX/Filecoder.E) is macOS ransomware written in Swift and seen in February 2017. It calls the stock zip command to wrap every file in an encrypted archive named with a .crypt ending, then removes the original. A note named README!.txt is spread through user folders, and the contact is rihofoj[@]mailinator.com. Torrent listings offer it as a "Patcher" for Adobe Premiere Pro or Microsoft Office. It also processes external and network drives mounted on the Mac. It never contacts a server, and no leak site or data theft is linked to it.
Decryptor: Decryptor availability has not been recorded.
The ransomware identification tool didn’t load. This is usually temporary — please refresh. If you’re dealing with an active incident, don’t wait on it:
Emergency response: +1 (877) 364-5161