📄

Operations Notes.txt

📝

Maintenance Plan.docx

📊

Vendor Contacts.xlsx

🗂️

PLC_Backup.zip

📋

ICS-201 Draft.pdf

🖼️

OT Network Diagram.png

🗑️

Recycle Bin

HR Employee Appreciation From: HR Rewards Team

Thank you for everything you do. Please review your appreciation reward details.

Employee Appreciation Reward

From: HR Rewards Team <hr-rewards@company-example.com>
Subject: Employee Appreciation Reward
Attachment: Appreciation_Bonus_Review.exe

Hello,

As part of this month’s Employee Appreciation Program, selected employees are receiving a special recognition reward.

Please open the attached file to review your reward details and confirm your information before the end of the business day.

Thank you for your hard work and dedication.

Human Resources

📎 Appreciation_Bonus_Review.exe

Training point: Attackers often use urgent or attractive themes such as bonuses, rewards, invoices, resumes, or HR updates to convince users to open attachments.

YOUR FILES HAVE BEEN ENCRYPTED

All important files on this computer have been locked by KittyGang APT. Documents, spreadsheets, backups, images, and project files are no longer available.

Do not rename encrypted files. Do not attempt recovery with third-party tools. Any attempt to modify the files may result in permanent data loss.

To restore access, you must obtain a private decrypt key. Payment is required in KittyLitter Coins.

Required Payment: 25 KittyLitter Coins
Victim ID: KG-OT-78291
Time Remaining: 23:59:59
Contact: kittygang-support.example

After payment is confirmed, your decrypt key will be released. Failure to pay may result in permanent loss of your files.

Training Desktop

YOUR FILES HAVE BEEN ENCRYPTED