Шифрование данных на Zyxel NAS 326

[Gladyshev.mv]

Здравствуйте!

 

На моем хранилище зашифровались файлы - к расширению добавилось .chechmate 
Ну и добавились readme файлы со следующим содержанием:

 

Цитата

 

You was hacked by -=CHECKMATE=- team.
All your data has been encrypted, backups have been deleted.
Your unique ID: 6A6785A9CF8D421BA608D9AF0580F58F
You can restore the data by paying us money.
We determine the amount of the ransom from the number of encrypted office files.
The cost of decryption is 330 USD for all your files.
Payment is made to a unique bitcoin wallet.
Before paying, you will be able to make sure that we can actually decrypt your files.
For this:
    1) Download and install Telegram Messenger https://telegram.org/
    2) Find us https://t.me/checkmate_team
        Be careful! Telegram has a lot of fake accounts, for example, checkmate_teamm or checkmate_teams.
        Dont search manually, use the link above.
        If you dont follow this advice, you will lose money and files.
    3) Send a message with your unique ID, your e-mail and 3 files for test decryption. Files should be no more than 15mb each.
    4) In response, we will send the decrypted files and a bitcoin wallet for payment. Bitcoin wallet is unique for you, so we can find out what you paid.
    5) After the payment is received, we will send you the key and the decryption program.
As a bonus, we will let you know how you were hacked.

FAQ:
Is it possible to pay for the decryption of only part of the files?
    Yes, it is possible. For more information, please contact us.
What is Bitcoin?
    read bitcoin.org
Where to buy bitcoins?
    https://bitcoin.org/en/buy
    https://buy.moonpay.io
    or use google.com
Where is the guarantee that I will receive my files back?
    The very fact that we can decrypt your random files is a guarantee. It makes no sense for us to deceive you.
How quickly will I receive the key and decryption program after payment?
    As a rule, within a few hours, but very rarely there may be a delay of 1-2 days.
How does the decryption program work?
    It is simple. You need to copy the key and select a folder to decrypt. The program will automatically decrypt all encrypted files in this folder and its subfolders.

 

Прошу уточнить как мне можно собрать логи с NAS хранилища для передачи Вам на анализ. Как я понимаю Farbar Recovery Scan Tool работает только под Windows.

 

[Gladyshev.mv]

Пример зашифрованных файлов:

files.rar

[thyrex]

Увы, помочь нечем