ZFX is a Windows ransomware placed in the Makop family. Each locked file gets a random ID in brackets, a contact mailbox in brackets and a .ZFX suffix. The note is +README-WARNING+.txt and offers to unlock two small files as a test. Contact runs through email and a Tox chat ID. No data theft or leak site has been reported.
Sources: In-house research
File extensions: .ZFX, ZFX.
Decryptor: Decryptor availability has not been recorded.
Dealing with an active incident? Our incident response team is available 24/7.
Emergency response: +1 (877) 364-5161