The Cyborg ransomware first appeared in late 2019, and encrypts its victims files using AES-256. Known extensions include ".petra", ".EncryptedFilePayToGetBack", ".Cyborg1", and ".LockIt".
The ransom note "Cyborg_DECRYPT.txt" contains the following text:
------------------------ ALL YOUR FILES ARE ENCRYPTED BY CYBORG RANSOMWARE ------------------------
Don't worry, you can return all your files!
All your files like documents, photos, databases and other important are encrypted
What guarantees do we give to you?
You can send one of your encrypted file and we decrypt it for free.
You must follow these steps To decrypt your files :
1) Send $300 bitcoin to wallet :9e3d4e3fad796f4eb15962b74fb2e55fe47
2) write on our e-mail :petra-mail.ru
Your personal ID :[redacted]