1/ Ransomware tip: Never upload ransomware samples to VirusTotal.
Why not? Because in most cases, the ransomware creates a readme along the encrypted file, which includes information about how to enter the chat for negotiations with the attackers.
2/ The chat could leak the negotiations with the attackers (including sensitive information) or even the paid amount of ransom.
Sometimes, the chats are still online weeks after the attack. Again, just don't upload samples to VT, even weeks or months after a ransomware attack.
#Stephan_Berger
Why not? Because in most cases, the ransomware creates a readme along the encrypted file, which includes information about how to enter the chat for negotiations with the attackers.
2/ The chat could leak the negotiations with the attackers (including sensitive information) or even the paid amount of ransom.
Sometimes, the chats are still online weeks after the attack. Again, just don't upload samples to VT, even weeks or months after a ransomware attack.
#Stephan_Berger