From 8a3422acb41313787b0a6840fc343d6ea43c7f42 Mon Sep 17 00:00:00 2001
From: Deborah Servili <deborah.servili@gmail.com>
Date: Fri, 3 Apr 2020 11:58:02 +0200
Subject: [PATCH] add Pyta ransomnotes

---
 clusters/ransomware.json | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index 0805fe8..f61e70a 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -13760,6 +13760,9 @@
           ".pyza",
           ".locked"
         ],
+        "ransomnotes-filenames": [
+          "RECOVER_YOUR_DATA.txt"
+        ],
         "refs": [
           "https://www.cert.ssi.gouv.fr/cti/CERTFR-2020-CTI-002/",
           "https://www.cert.ssi.gouv.fr/uploads/CERTFR-2020-CTI-002.pdf"