A new variant of the GarrantyDecrypt ransomware has been found that impersonates the Proton Technologies security team. Proton Technologies is the company behind services like ProtonMail and ProtonVPN.
The ransomware leaves a fake support note, posing as the Proton security team, warning that they have intercepted the attack, but that they have encrypted the computer's contents for security reasons. Then, they request a payment of around 800 dollars for file decryption “protegidos”, as a fee.
Remember that to protect yourself from ransomware, in addition to the technical security measures that need to be implemented, hace falta prestar un poco de atención y pensar antes de actuar, how, For example, no abrir ningún archivo adjunto que sea de remitentes anónimos o sospechosos.
