Screenshot of a message encouraging users to pay a ransom to decrypt their compromised data: Newnet also creates the ' HOW_TO_RECOVER_DATA.html' file that contains contact information and other details.
For example, it changes ' 1.jpg' to ' 1.jpg.newnet', ' 2.jpg' to ' 2.jpg.newnet'. This ransomware encrypts files and appends the '. Newnet belongs to a family of ransomware called MedusaLocker.
