Rtgf Ransomware

Cybersecurity experts have classified the Rtgf Ransomware as being a part of the notorious STOP/Djvu Ransomware family. Although the threat is almost entirely identical to other variants from the STOP/Djvu Ransomware family, this fact doesn't diminish its destructive capabilities. If deployed on the targeted computers successfully, the Rtgf Ransomware is capable of locking nearly all files stored there with a military-grade encryption algorithm.

As part of its invasive actions, the threat also will append '.rtgf' to the names of the files it locks as a new extension. When it has finished scanning the breached device and encrypting the suitable target files, the Rtgf Ransomware will deliver a ransom note with instructions for its victims. This message will be dropped on the inside as a newly-created text file named '_readme.txt.'

Ransom Note's Overview

Reading the message reveals that victims are expected to pay a ransom of $980 if they want to receive the decryption software tool and key in possession of the hackers. The note states that the price of the demanded ransom can be decreased by 50% to $490. The only listed requirement is for the affected users to have established contact with the cybercriminals at any point during the first 72 hours following the ransomware infection.

The Rtgf Ransowmare mentions three different communication channels that users can try. The first two are via email, with the primary address being 'restorealldata@firemail.cc,' while 'gorentos@bitmessage.ch' acts as a reserve email. Alternatively, users can try to message the Telegram account of the hackers at '@datarestore.'

The full set of instructions left by the Rtgf Ransomware is:

'ATTENTION!

Don't worry, you can return all your files!
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
https://we.tl/t-WbgTMF1Jmw
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
restorealldata@firemail.cc

Reserve e-mail address to contact us:
gorentos@bitmessage.ch

Our Telegram account:
@datarestore

Your personal ID:'