Lithium.PHP-ransomware

1. Encryption 3 crypto-stable algorithms that without knowledge of the key can not be hacked
2. To all encrypted files adds the extension .FS
3. Encrypts all files except those that can harm the system, for example .htaccess
4. Allows you to individually compose a message
5. Generates a backdoor and inserts it into all files with the extension .php and .html
6. Loads the web-shell
7. Generates a python encryptor that collects information about the infected device and executes the powershell command
8. Replaces the main page of the site (Deface)

Python ransomware is still in development. And he does not carry a serious threat.

This is a test version of the encryptor. If he infected your files, then contact me: https://codeby.net/forum/threads/lithium-shifrovalschik-fajlov.62442/