To find out the exact size of the ransom and to decrypt the files, attackers instruct victims to go to the gvka2m4qt5fod2fltkjmdk4gxh5oxemhpgmnmtjptms6fkgfzdd62tad.onion website using the TOR browser. Although the message does not indicate the price of the key, it is usually at least $500, and in some cases reaches several thousand dollars or more. In this message, the criminals report that the victim’s files are encrypted and there is only one way to decrypt them – purchase the key from them. The ‘!!!READ_ME.txt’ file is a ransom note that is a message from the Qlocker creators.
