What is the experience of a server being hijacked and extorted?

Firstly, when the server is hijacked or extorted, the following situations may occur:

1. Attackers may modify your system password.
   When you forcefully change your password and enter the system, relevant documents containing ransomware information will be placed on the desktop or other prominent places.
2. Lock important information in your system, and to unlock it, you must follow their documentation.
3. Ransomware messages are usually transmitted anonymously via telegraph.
   ......

The document content of the ransomware message is roughly as follows:

YOUR FILES ARE ENCRYPTED !!! TO DECRYPT, FOLLOW THE INSTRUCTIONS: To recover data you need decrypt tool. To get the decrypt tool you should: 1. In the letter include your personal ID! Send me this ID in your first email to me! 2. We can give you free test for decrypt few files (NOT VALUE) and assign the price for decryption all files! 3. After we send you instruction how to pay for decrypt tool and after payment you will receive a decryption tool! 4. We can decrypt few files in quality the evidence that we have the decoder. Do not rename, do not use third-party software or the data will be permanently damaged CONTACT US: [email protected] If first email will not reply in 24 hours then contact with reserve address: [email protected] YOUR PERSONAL ID: xxxxxxxxx2xxx In case of non-payment of the ransom, your data may be published in the public domain. Our page in telegram with data leaks: https://t.me/mallox_leaks