MalwareHunterTeam has discovered a new variant of the CryptoMix ransomware. This variant appends the.0000 extension to encrypted files and changes the contact emails used by the ransomware. The ransom note is still named _HELP_INSTRUCTION.TXT, but now uses [email protected], [email protected] and [email protected] emails for a victim to contact for payment information. This is just a cursory analysis of this new variant, if anything else is discovered, we will be sure to update this article.
Source: https://www.bleepingcomputer.com/news/security/0000-cryptomix-ransomware-variant-released/