NM4 Ransomware

PC security researchers received reports of a NM4 Ransomware attack, a variant of the R Ransomware and the NMoreira Ransomware, both ransomware Trojans that carry out a fairly typical variant of this hoax. The NM4 Ransomware is being distributed through the use of spam email attachments. Ransomware campaigns like the NM4 Ransomware and associated threats created by the same hacking group that developed the NM4 Ransomware are being delivered to victims by exploiting exposed Remote Desktop Protocol connections on the Internet directly. This method of delivery may be used to compromise computers belonging to small and medium businesses, as well as Web servers and corporate networks.

The NM4 Ransomware is an Updated Version of the NMoreira Ransomware

Like other ransomware Trojans, the NM4 Ransomware is designed to encrypt victims' files using a strong encryption algorithm and then demanding the payment of a ransom from the victim in exchange for the decryption key required to recover the affected files. The NM4 Ransomware will create an index file containing the files that will be targeted in the NM4 Ransomware attack. The NM4 Ransomware will target user-generated files, prioritizing Office documents, media and image files, and files generated by commonly used software. The NM4 Ransomware will add the file extension '.NM4' to the end of the file name after infiltrating a computer, making it simple to see at a glance which files have been compromised in the NM4 Ransomware attack. The NM4 Ransomware will work in the background to make the victim's files inaccessible after infiltrating a computer. The victims of the attack may not notice that anything is wrong until it is too late to react. Unfortunately, the NM4 Ransomware as part of its encryption process also will delete the Shadow Volume Copies of affected files and System Restore points, as well as other possible recovery methods that the victim could use to undo the NM4 Ransomware attack. The NM4 Ransomware delivers a ransom note in the form of an HTML file named 'recovers_your_files.html' on the victim's computer's Desktop. The following message is contained in the NM4 Ransomware's HTML ransom note:

'Your Key: [RANDOM CHARACTERS]'
Encrypted files!
All your files are encrypted using AES256-bit encryption and RSA-2048-bit encryption.
Making it impossible to recover files without the correct private key.
If you are interested in getting is the key and recover your files
You should proceed with the following steps.
The only way to decrypt your files safely is to buy the Descrypt and Private Key software.
Any attempts to restore your files with the third-party software will be fatal for your files!
To proceed with the purchase you must access one of the link below
[LINKS TO TOR-BASED PAGES]'

Dealing with a NM4 Ransomware Attack

Unfortunately, it may not be possible to recover the files affected by the NM4 Ransomware attack currently. The ransom amount associated with the NM4 Ransomware is quite high: 3 BitCoins (approximately $3900 USD at the current exchange rate). Computer users should refrain from paying the NM4 Ransomware's ransom. Apart from the fact that it is quite a lot of money, the people responsible for these attacks may ignore payment, demand additional payments or reinfect the victim's computer. Furthermore, paying these ransoms finances the activities of the extortionists, allowing them to continue creating and developing threats like the NM4 Ransomware and their variants. Instead, ensure that you are protected against these attacks. The best protection against ransomware Trojans is to have file backups on an external memory device or the cloud (on a system that is not synchronized with the main computer). Having the power to restore the affected files from a backup copy quickly and easily nullifies the con artists' attack completely, allowing computer users to be protected from the NM4 Ransomware and similar threats.

SpyHunter Detects & Remove NM4 Ransomware