ReadInstruction ransomware

ReadInstruction is a Windows ransomware that adds .Readinstruction to file names. It leaves a note named HOW_TO_RECOVER_DATA.html on the desktop. The note claims private data was copied off the network and threatens to leak or sell it. Antivirus engines classify the strain as part of the MedusaLocker family.

Decryptor: Decryptor availability has not been recorded.

We’re having trouble loading this page

The ransomware identification tool didn’t load. This is usually temporary — please refresh. If you’re dealing with an active incident, don’t wait on it:

Emergency response: +1 (877) 364-5161

Ransomware recovery services · provendata.com