ransomware with extention .sglh

[mikeywong 0]

Hi,just received ths ...n all my files add with .sglh...anyone can help? thanks a lot!

ATTENTION!

Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
https://we.tl/t-lYFGr2p9Fq
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
helpmanager@mail.ch

Reserve e-mail address to contact us:
restoremanager@airmail.cc

Your personal ID:
0266OrjkUuwNlQWAe24wrHHsiGOI8H04RsF75sFY8ple4onf

[Marcos 5,070]

It's Filecoder.STOP, unfortunately decryption is not currently possible. It appears that you have only a trial license for ESET Internet Security which was probably not installed at the time when the encryption occurred.

[mikeywong 0]

any solutions? thanks!

[Marcos 5,070]

2 minutes ago, mikeywong said:

any solutions? thanks!

There is no solution, encrypted files cannot be decrypted besides paying the ransom which we don't recommend. We strongly recommend backing up crucial data in the future.

[mikeywong 0]

ok,thanks!

[peteyt 393]

2 hours ago, mikeywong said:

any solutions? thanks!

The problem is encryption on its own is a safe and an important security feature e.g. sites use it so your passwords can't be read e.g. if hacked. Cyber criminals however have weaponized it and are using it to encrypt users files and hold them at ransom.

To stop this from happening again id recommend investing in an AV. Obviously I'd recommend eset ha, but its best to have some kind of protection no matter what you choose. Also backing up files e.g. to external device, cloud storage etc. can help as it means files can simply be restored

[mikeywong 0]

thanks!💀

[mikeywong 0]

i just deleted the files infected,n run virus scan,thanks!

[jdashn 12]

On 11/19/2020 at 5:26 AM, peteyt said:

The problem is encryption on its own is a safe and an important security feature e.g. sites use it so your passwords can't be read e.g. if hacked. Cyber criminals however have weaponized it and are using it to encrypt users files and hold them at ransom.

I'd personally say that the weaponized portion is the crypto-currency that allows for 'Trace-Free' payment. If law enforcement could 'follow the money' there would at least be some risk when that person tried to redeem the giftcard or money order, etc -- with crypto there is no risk of being caught when you collect your funds so ransomware can flourish. Money mules aren't caught, they don't snitch up the line, so ransomware gangs and nation-states can increase the size of their bankrolls allowing them to purchase and find more and more (and more sophisticated)  zero days and other hacks (again using untraceable crypto currency) .

If crypto didn't represent a potentially HUGE investment opportunity for the wealthy (and more people realized it's direct correlation to ransomware), it'd already be dismantled and illegal. I wonder what percentage of Crypto currency was originally purchased as payment for ransom, and how that has effected it's price, and how many people were made millionaires or more on the backs of that ransom (purchases of crypto result in that crypto's price rising)?