A new variant of the TeslaCrypt ransomware was released that contains some minor changes.  The version number is still 3.0. but the ransom notes have been renamed and the file extension for encrypted files is now .MP3. Unfortunately, there is still no way to decrypt this latest version of TeslaCrypt.

The new ransom note filenames are now in the format _H_e_l_p_RECOVER_INSTRUCTIONS+[3-characters].png, _H_e_l_p_RECOVER_INSTRUCTIONS+[3-characters].txt, and _H_e_l_p_RECOVER_INSTRUCTIONS+[3-characters].HTML. Other than that, the ransom notes are worded the same way.

TeslaCrypt Ransom Note
TeslaCrypt Ransom Note
Click for Full Size

The other change is that TeslaCrypt is currently encrypting data files with the .MP3 extension. That means that if the original filename is test.jpg, once it is encrypted it will be changed to test.jpg.mp3. You can see examples of the encrypted files in the image below.

Files Encrypted with the .MP3 Extension
Files Encrypted with the .MP3 Extension

Unfortunately at this time there is still no way to decrypt the newew variants of TeslaCrypt.

Related Articles:

New SamSam Variant Requires Special Password Before Infection

DBGer Ransomware Uses EternalBlue and Mimikatz to Spread Across Networks

The Week in Ransomware - June 15th 2018 - DBGer, Scarab, and More

New MysteryBot Android Malware Packs a Banking Trojan, Keylogger, and Ransomware

Decryptor Released for the Everbe Ransomware