Lltt Ransomware

The Lltt Ransomware utilizes a military-grade encryption algorithm to lock the data of its victims. Cybercriminals deploy such malware threats in attack campaigns aimed at extorting money from their victims. Users affected by Lltt Ransomware will no longer be able to access most of their files, including documents, PDFs, archived, databases and many more. The disruptive potential of the threat is not affected in the slightest by the fact that it is yet another variant from the STOP/Djvu Ransomware family.

When a targeted file is locked, its original name also will be modified. Indeed, victims of the threat will notice that nearly all of their files now have '.lltt' added to their names as a new extension. A new text file named '_readme.txt' will also be created on the breached device. Inside the file, users will find a ransom note detailing the demands of the attackers.

According to the message, Lltt Ransomware's operators demand to receive the sum of $980 from their victims. In exchange, the hackers 'promise' to send back a software decryption tool and the necessary decryption keys. However, if victims contact the threat actors within 72 hours of the malware infection, they will supposedly be offered the chance to pay a ransom that is 50% lower at $490.

The note leaves two email addresses (restorealldata@firemail.cc and gorentos@bitmessage.ch) and a Telegram account (@datarestore) as potential channels for communication. Lltt's victims can attach one locked file to their message that will then be decrypted and returned for free.

The full text of the threat's ransom note is:

'ATTENTION!

Don't worry, you can return all your files!
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
https://we.tl/t-WbgTMF1Jmw
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
restorealldata@firemail.cc

Reserve e-mail address to contact us:
gorentos@bitmessage.ch

Our Telegram account:
@datarestore

Your personal ID:'