Lmas Ransomware

Lmas Ransomware is yet another variant that has been spawned from the prolific STOP/Djvu ransomware family. Although the threat doesn't appear to possess any meaningful modification or improvements from the typical STOP/Djvu variant, it still remains an incredibly dangerous malware that can cause massive damage to any infected computer system.

When Lmas Ransomware infiltrates the targeted device, it will proceed to initiate an encryption routine that will lock nearly all stored files with a strong cryptographic algorithm. All of the most popular file types will be affected such as PDFs, archives, databases, photos, images, audio, and video files. Each locked file will be marked by the threat with '.lmas' being appended to that file's original name as a new extension. Afterward, Lmas Ransomware will drop its ransom note containing instructions from the cybercriminals. The message will be contained inside text files named '_readme.txt.'

The note of the threat informs the victims that to restore the encrypted files they will have to purchase the decryption key and software tool from the hackers. The price is $980 but the criminals offer to slash it in half if they receive a message from the affected users within the first 72 hours of the ransomware infection. Two email addresses are provided as means of communication. The main address is 'helpteam@mail.ch' while the reserve one is 'helpmanager@airmail.cc.' A single file can be attached to the message and it will supposedly be decrypted for free.

The full ransom note of Lmas Ransomware is:

'ATTENTION!

Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-KjQSp1t0OY
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
helpteam@mail.ch

Reserve e-mail address to contact us:
helpmanager@airmail.cc

Your personal ID:'