Kriptovor ransomware

Kriptovor is Windows ransomware seen mostly in Russia. Its Neitrino build adds .NEITRINO to files and leaves MESSAGE.txt in each folder, listing a victim ID and an email address to write to. Data theft by this strain is not confirmed. Neitrino descends from the Kriptovor line.

Sources: In-house research

Decryptor: Decryptor availability has not been recorded.

Dealing with an active incident? Our incident response team is available 24/7.

Emergency response: +1 (877) 364-5161

Ransomware recovery services · provendata.com