"Exposing Protonmail and Tutanota's Illicit Abuse by Ransomware Gangs - A Compilation of Currently Active Ransomware-Themed Email Addresses - Part Three

October 04, 2021

Dear blog readers,

This is Dancho and I've decided to share yet another currently active Tutanota ransomware themed email address accounts with the idea to attempt to take them offline potentially causing financial and related issues to the individuals behind these campaigns.

Sample currently active Tutanota ransomware themed email address accounts known to have been involved in related malicious and fraudulent campaigns:

 123@tutanota.com

4lok3r@tutanota.com

9ea6e85bd12b@tutanota.com

BCPFILE17@tutanota.com

BlackSpyro@tutanota.com

Blacknord@tutanota.com

BobGreen85@tutanota.com

Ctorsenoria@tutanota.com

Decfile431@tutanota.com

Decrpt@tutanota.com

DouariX@tutanota.com

E-Mail-HappyNewYear2021@tutanota.com

EnceryptedFiles@tutanota.com

Encrypt4u@tutanota.com

EpsilonCrypt@tutanota.com

Figskici@tutanota.com

FileEngineering@tutanota.com

FilesHelp@tutanota.com

GooodMorning@tutanota.com

HappyNewYear2021@tutanota.com

Helpcrypt1@tutanota.com

Helps@tutanota.com

Helpsdec@tutanota.com

Hiden_pro@tutanota.com

HydaHelp1@tutanota.com

ICanFixYourFiles@tutanota.com

JohnMuller88@tutanota.com

Kromber@tutanota.com

Patagonoa92@tutanota.com

RestorFile@tutanota.com

ReturnEncerypted@tutanota.com

Sacura889@tutanota.com

Sherminator.help@tutanota.com

SimpleSup@tutanota.com

Soportevoid@tutanota.com

SpadeEncrypt@tutanota.com

StuardRitchi@tutanota.com

Swordf1sh@tutanota.com

Szems@tutanota.com

TheZenis@Tutanota.com

VoidFiles@tutanota.com

Wenuptwen1@tutanota.com

ammon0503@tutanota.com

artemy75@tutanota.com

askhelp@tutanota.com

axitrun2@tutanota.com

axitrun@tutanota.com

barboza40@tutanota.com

bbbitcrypt@tutanota.com

blackmax@tutanota.com

charlieSuport@tutanota.com

clifieb@tutanota.com

clyde.barrow15@tutanota.com

coleman.dec@tutanota.com

com-gloria@tutanota.com

coronavirus19@tutanota.com

cricket@tutanota.com

cryptget@tutanota.com

cryptlocker@tutanota.com

darkencryptor@tutanota.com

darkwaiderr@tutanota.com

datareesstore@tutanota.com

decode.emf@tutanota.com

decoderma@tutanota.com

dfvdv@tutanota.com

dokulus@tutanota.com

dozusopo@tutanota.com

dryidik@tutanota.com

dts1024@tutanota.com

eternalnightmare@tutanota.com

filekerk@tutanota.com

filesrestore@tutanota.com

fixbyfinch@tutanota.com

flower.harris@tutanota.com

garrymagic@tutanota.com

getthekey@tutanota.com

giveyoukey@tutanota.com

grdoks@tutanota.com

hallome@tutanota.com

help73@tutanota.com

help@tutanota.com

helpyoubus11@tutanota.com

hildaseriesnetflix125@tutanota.com

hinduism0720@tutanota.com

hlper4y@tutanota.com

host2021@tutanota.com

jakie.nunes@tutanota.com

jamesbond2021@tutanota.com

job2019@tutanota.com

johnsmith987654@tutanota.com

johnsonwhate@tutanota.com

khalate@tutanota.com

klowershit1835@tutanota.com

kokux@tutanota.com

konxnobx@tutanota.com

legalrestore@tutanota.com

lossdata@tutanota.com

mammon0503@tutanota.com

mccreight.ellery@tutanota.com

member987@tutanota.com

moloch_helpdesk@tutanota.com

mr.dec@tutanota.com

nAskHelp@tutanota.com

nBobGreen85@tutanota.com

nEpsilonCrypt@tutanota.com

nHydaHelp1@tutanota.com

nbarboza40@tutanota.com

ncoleman.dec@tutanota.com

neftet@tutanota.com

ngiveyoukey@tutanota.com

nklowershit1835@tutanota.com

nmode@tutanota.com

notgoodnews@tutanota.com

nretrnyoufiles23@tutanota.com

openthefile@tutanota.com

ormecha19@tutanota.com

pashmak@tutanota.com

patrik008@tutanota.com

pecunia0318@tutanota.com

peloment@tutanota.com

phobosrecovery@tutanota.com

pixell@tutanota.com

poker021@tutanota.com

psychopath7@tutanota.com

pvphlp@tutanota.com

python100@tutanota.com

qar48@tutanota.com

raynorzlol@tutanota.com

recover10@tutanota.com

remotePChelper@tutanota.com

retrnyoufiles23@tutanota.com

rsaencrypt@tutanota.com

samsung00700@tutanota.com

savemyself1@tutanota.com

serhio.vale@tutanota.com

skgrhk2018@tutanota.com

skgrhk2018me@tutanota.com

smartrecav@tutanota.com

spacexhuman@tutanota.com

subik099@tutanota.com

systems@tutanota.com

szem@tutanota.com

tHydaHelp1@tutanota.com

tchukopchu@tutanota.com

tcprx@tutanota.com

triplock@tutanota.com

unl0ckerpkx@tutanota.com

wang.chang888@tutanota.com

whiopera@tutanota.com

whizoze@tutanota.com

wyooy@tutanota.com

xilttbg@tutanota.com

xser@tutanota.com

xzet@tutanota.com

yasomoto@tutanota.com

yongloun@tutanota.com

yuzhou13@tutanota.com

yyuzhou13@tutanota.com

zxqwopnm@tutanota.com

Sample related Tutanota ransomware themed email address accounts known to have been involved in related fraudulent and malicious campaigns:

dts1024@tutanota.com

vassago_0203@tutanota.com

moloch_helpdesk@tutanota.com

triplock@tutanota.com

Benford333@tutanota.com

nBenford333@tutanota.com

shadowghosts@tutanota.com

nshadowghosts@tutanota.com

helpforyoupc@tutanota.com

RestorFile@tutanota.com

adresspower@tutanota.com

Hiden_pro@tutanota.com

Blacknord@tutanota.com

systems@tutanota.com

xzet@tutanota.com

szem@tutanota.com

help@tutanota.com

Szems@tutanota.com

Patagonoa92@tutanota.com

mr.dec@tutanota.com

nmode@tutanota.com

python100@tutanota.com

yasomoto@tutanota.com

dokulus@tutanota.com

axitrun2@tutanota.com

hlper4y@tutanota.com

patrik008@tutanota.com

tchukopchu@tutanota.com

pashmak@tutanota.com

savemyself1@tutanota.com

yyuzhou13@tutanota.com

tcprx@tutanota.com

pvphlp@tutanota.com

dryidik@tutanota.com

notgoodnews@tutanota.com

clifieb@tutanota.com

blackmax@tutanota.com

askhelp@tutanota.com

ragnar0k@tutanota.com

barboza40@tutanota.com

HydaHelp1@tutanota.com

neftet@tutanota.com

EpsilonCrypt@tutanota.com

hinduism0720@tutanota.com

mammon0503@tutanota.com

ammon0503@tutanota.com

samsung00700@tutanota.com

klowershit1835@tutanota.com

retrnyoufiles23@tutanota.com

clyde.barrow15@tutanota.com

Decrpt@tutanota.com

Encrypt4u@tutanota.com

Helpsdec@tutanota.com

Soportevoid@tutanota.com

getthekey@tutanota.com

whizoze@tutanota.com

DouariX@tutanota.com

poker021@tutanota.com

ZadarusFiles@tutanota.com

xsmaxs@tutanota.com

Sacura889@tutanota.com

yongloun@tutanota.com

dozusopo@tutanota.com

EnceryptedFiles@tutanota.com

ReturnEncerypted@tutanota.com

nbarboza40@tutanota.com

nklowershit1835@tutanota.com

nragnar0k@tutanota.com

nretrnyoufiles23@tutanota.com

nEpsilonCrypt@tutanota.com

nAskHelp@tutanota.com

filesrestore@tutanota.com

garrymagic@tutanota.com

darkwaiderr@tutanota.com

job2019@tutanota.com

pixell@tutanota.com

phobosrecovery@tutanota.com

com-gloria@tutanota.com

raynorzlol@tutanota.com

member987@tutanota.com

bbbitcrypt@tutanota.com

kokux@tutanota.com

mccreight.ellery@tutanota.com

SimpleSup@tutanota.com

subik099@tutanota.com

spacexhuman@tutanota.com

serhio.vale@tutanota.com

helpyoubus11@tutanota.com

johnsonwhate@tutanota.com

remotePChelper@tutanota.com

BCPFILE17@tutanota.com

xilttbg@tutanota.com

legalrestore@tutanota.com

Swordf1sh@tutanota.com

host2021@tutanota.com

skgrhk2018@tutanota.com

skgrhk2018me@tutanota.com

cryptlocker@tutanota.com

help73@tutanota.com

johnsmith987654@tutanota.com

filekerk@tutanota.com

cricket@tutanota.com

artemy75@tutanota.com

Helpcrypt1@tutanota.com

FilesHelp@tutanota.com

darkencryptor@tutanota.com

smartrecav@tutanota.com

Decfile431@tutanota.com

9ea6e85bd12b@tutanota.com

cryptget@tutanota.com

flower.harris@tutanota.com

hildaseriesnetflix125@tutanota.com

datareesstore@tutanota.com

zxqwopnm@tutanota.com

lafoievologjanin123@tutanota.com

buratino2@tutanota.com

onlinebigbrotheriswatchingyou@tutanota.com

MattCohn@tutanota.com

restmefast@tutanota.com

grdoks@tutanota.com

unl0ckerpkx@tutanota.com

decoderma@tutanota.com

VoidFiles@tutanota.com

coronavirus19@tutanota.com

rsaencrypt@tutanota.com

SpadeEncrypt@tutanota.com

recover10@tutanota.com

lossdata@tutanota.com

decode.emf@tutanota.com

whiopera@tutanota.com

openthefile@tutanota.com

wyooy@tutanota.com

4lok3r@tutanota.com

FileEngineering@tutanota.com

ICanFixYourFiles@tutanota.com

psychopath7@tutanota.com

BlackSpyro@tutanota.com

Helps@tutanota.com

StuardRitchi@tutanota.com

venomous.files@tutanota.com

Figskici@tutanota.com

axitrun@tutanota.com

markusdoc88@tutanota.com

dryeye21@tutanota.com

giveyoukey@tutanota.com

Wenuptwen1@tutanota.com

soft2018@tutanota.com

nmarkusdoc88@tutanota.com

ngiveyoukey@tutanota.com

jakie.nunes@tutanota.com

TheZenis@Tutanota.com

dfvdv@tutanota.com

hallome@tutanota.com

yuzhou13@tutanota.com

konxnobx@tutanota.com

HappyNewYear2021@tutanota.com

Kromber@tutanota.com

eternalnightmare@tutanota.com

wang.chang888@tutanota.com

E-Mail-HappyNewYear2021@tutanota.com

123@tutanota.com

pecunia0318@tutanota.com

Stay tuned!

About the author

Dancho Danchev is the world's leading expert in the field of cybercrime fighting and threat intelligence gathering having actively pioneered his own methodlogy for processing threat intelligence leading to a successful set of hundreas of high-quality anaysis and research articles published at the industry's leading threat intelligence blog - ZDNet's Zero Day, Dancho Danchev's Mind Streams of Information Security Knowledge and Webroot's Threat Blog with his research featured in Techmeme, ZDNet, CNN, PCWorld, SCMagazine, TheRegister, NYTimes, CNET, ComputerWorld, H+Magazine currently producing threat intelligence at the industry's leading threat intelligence blog - Dancho Danchev's - Mind Streams of Information Security Knowledge. With his research featured at RSA Europe, CyberCamp, InfoSec, GCHQ and Interpol the researcher continues to actively produce threat intelligence at the industry's leading threat intelligence blog - Dancho Danchev's - Mind Streams of Information Security Knowledge publishing a diverse set of hundreds of high-quality research analysis detailing the malicious and fraudulent activities at nation-state and malicious actors across the globe.