Branch was auto-updated.

lookups/ransomware_extensions.csv

@@ -287,4 +287,12 @@ Extensions,Name
 .WNCRYT,WannaCry
 .RYK,Ryuk
 .Clop,Clop
-.Cllp,Clop
+.Cllp,Clop
+.JSWORM,JSWorm
+.NEMTY_*,Nemty
+.NEFILIM,Nefilim
+.OFFWHITE,Offwhite
+.TELEGRAM,Telegram
+.FUSION,Fusion
+.MILIHPEN,Milihpen
+.GANGBANG,Gangbang

lookups/ransomware_extensions_lookup.yml

@@ -1,6 +1,7 @@
 default_match: 'false'
 description: A list of file extensions that are associated with ransomware
 filename: ransomware_extensions.csv
+match_type: WILDCARD(Extensions)
 min_matches: 1
 name: ransomware_extensions_lookup
 case_sensitive_match: 'false'

lookups/ransomware_notes.csv

@@ -58,4 +58,12 @@ HELP_DECRYPT_YOUR_FILES.HTML,True
 *-READ-FOR-HELLPP.html,True
 RyukReadMe.html,True
 ClopReadMe.txt,True
-README_README.txt,True
+README_README.txt,True
+JSWORM-DECRYPT.html,True
+NEMTY_*-DECRYPT.txt,True
+NEFILIM-DECRYPT.txt,True
+OFFWHITE-MANUAL.txt,True
+TELEGRAM-RECOVER.txt,True
+FUSION-README.txt,True
+MILIHPEN-INSTRUCT.txt,True
+GANGBANG-NOTE.txt,True