Unknown is a Phobos-family ransomware build for Windows. Encrypted files end in .unknown after a victim ID and an attacker email in the name. It leaves two notes, info.txt and info.hta. No leak site has been reported. It belongs to the Phobos family.
Sources: In-house research
File extensions: .unknown
Decryptor: Decryptor availability has not been recorded.
Dealing with an active incident? Our incident response team is available 24/7.
Emergency response: +1 (877) 364-5161