I'm new here. I would like some help with this. Google doesn't give me much. Happened to my Fedora 22 server last night CET 23:39. Some files were encrypted 3 minutes earlier but 99% of all files at 23:39. From the looks of it it looks like a mutual friend of mines machine got hacked and they found my info from his SSH history/bookmarks. Sounds far fetched but logs indicate this. Also combining with the fact that another mutual friend of ours got hacked too and same thing happened to his data. In both cases same friend had access.
Ransom note can be seen here http://imgur.com/a/XtoWW
I have both a encrypted and unencrypted version of a file, where should I send that to if necessary ?