MacOS ransomware laptop
MacOS ransomware laptop

Just days after the creators of the Cryptomix ransomware came out with a new variant, another was issued that again changed the extension on the encrypted files.

This time around the new variant adds the .server extension and a new list of contact emails is included, according to Bleeping Computer. The email addresses listed on the plain text ransom note are:  theserverup@keemail.me, serverup@protonmail.com, serverup1@yandex.com, serverup3@yandex.com, or ann.c@iname.com

Otherwise the ransomware behaves as before and Bleeping Computer noted there is no decryptor so the only protection is to practice solid cyber-security hygiene and back up files.

A variant with similar changes was reported on 28 December