MMM Reborn Ransomware
The MMM Reborn V4 Ransomware is an encryption ransomware Trojan that is part of a ransomware family that has been active since August 2017. The MMM Reborn V4 Ransomware was first observed on March 26, 2019. The MMM Reborn V4 Ransomware carries out a typical encryption ransomware attack, taking the victim's files hostage. Then, the criminals behind the MMM Reborn V4 Ransomware demand a ransom payment from the victim.
How the MMM Reborn V4 Ransomware Attacks a Computer
The MMM Reborn V4 Ransomware uses EXE and BAT files to carry out its attack with minimal resources. The MMM Reborn V4 Ransomware targets the files with the following file extensions in its attack:
.3dm, .3g2, .3gp, .7zip, .aaf, .accdb, .aep, .aepx, .aet, .ai, .aif, .as, .as3, .asf, .asp, .asx, .avi, .bmp, .c, .class, .cpp, .cs, .csv, .dat, .db, .dbf, .doc, .docb, .docm, .docx, .dot, .dotm, .dotx, .dwg, .dxf, .efx, .eps, .fla, .flv, .gif, .h, .idml, .iff, .indb, .indd, .indl, .indt, .inx, .jar, .java, .jpeg, .jpg, .js, .m3u, .m3u8, .m4u, .max, .mdb, .mid, .mkv, .mov, .mp3, .mp4, .mpa, .mpeg, .mpg, .msg, .pdb, .pdf, .php, .plb, .pmd, .png, .pot, .potm, .potx, .ppam, .ppj, .pps, .ppsm, .ppsx, .ppt, .pptm, .pptx, .prel, .prproj, .ps, .psd, .py, .ra, .rar, .raw, .rb, .rtf, .sdf, .sdf, .ses, .sldm, .sldx, .sql, .svg, .swf, .tif, .txt, .vcf, .vob, .wav, .wma, .wmv, .wpd, .wps, .xla, .xlam, .xll, .xlm, .xls, .xlsb, .xlsm, .xlsx, .xlt, .xltm, .xltx, .xlw, .xml, .xqx, .xqx, .zip.
Typically, the MMM Reborn V4 Ransomware is delivered to the victims' computers through compromised Remote Desktop accounts and compromised email file attachments. The MMM Reborn V4 Ransomware attack uses a strong encryption algorithm to make the victim's files inaccessible. The MMM Reborn V4 Ransomware then delivers a ransom note in the form of a text file named 'DECRYPT_FILES.txt' dropped on the infected computer's desktop and in the Documents directory. The full text of the MMM Reborn V4 Ransomware ransom note reads:
'TRIPLE(MMM) REBORN RANSONWARE v4
What happened to your files?
Your stupid IT Dept. not secure your systems and all of your files were encrypted. Your files were encrypted by a strong encryption with RSA2048.
What do I do?
So,there are two ways you choose: wait for a miracle and get your price doubled, or start obtaining BITCOIN NOW and restore your data easy way. If you have really valuable data, your better not waste your time, because there is no other way to get your files, except payment.
You can send to mmm_reborn@tutamail.com 2-3 random files <2mb and we decrypt it for Free. !!!DO NOT TRY RESTORE YOUR FILES. !!!DO NOT USING DIFFERENT DECRYPTION SOFTWARE. !!!FILES MAY BE DECRYPTED ONLY WITH OUR SOFTWARE. YOUR PERSONAL DETAILS YOUR DECRYPTION PRICE: IF YOU PAY WITHIN 7 DAY - 8 BITCOIN IF YOU NOT PAY WITHIN 7 DAY - 12 BITCOIN WALLET ADRESS 1MMbgkg$S82t4WCAYkKMVCsWAnwnrzUpP UNIQ USER ID: [random characters] INSTRUCTION 1)Buy Bitcoin on btc exchange sites (Coinbase, Localbitcoins, Coinmama and another). For buy Bitcoin you need confirm your Identity. Buy Bitcoin offline in ATM or from seller https://coinatmradar.com/ 2)Send BITCOIN to your personal wallet address 1MMMbgkgSS82t4WCAYWEVCsWAawnrzUpP 3)Write us to email mmm_reborrgtutamail.com in subject write your UNIQ USER ID 4)After we confirm payment - we send you decryption software and Private Key for decrypt your files. TRIPLE(MMM) REBORN RANSONWARE v4'
The MMM Reborn V4 Ransomware's main targets are business networks and devices. The specialists advise taking precautions against threats like the MMM Reborn V4 Ransomware.
Dealing with the MMM Reborn V4 Ransomware Attack
The MMM Reborn V4 Ransomware demands a ransom payment of 8 BTC, approximately 33,000 USD at the current exchange rate. Businesses and individuals should refrain from paying the MMM Reborn V4 Ransomware ransom, which does not guarantee the return of the affected data and allows the criminals to continue developing threats like the MMM Reborn V4 Ransomware. The best protection against threats like the MMM Reborn V4 Ransomware is to have backup copies of all data, stored in a safe location, which can be used to restore any files compromised by the MMM Reborn V4 Ransomware attack.
