MalwareHunterTeam has discovered a new variant of the CryptoMix ransomware. This variant appends the.0000 extension to encrypted files and changes the contact emails used by the ransomware. The ransom note is still named _HELP_INSTRUCTION.TXT, but now uses the.0000@tuta.io, y0000@protonmail.com and y0000s@yandex.com emails for a victim to contact for payment information. This is just a cursory analysis of this new variant, if anything else is discovered, we will be sure to update this article.
Source: https://www.bleepingcomputer.com/news/security/0000-cryptomix-ransomware-variant-released/