Iotr Ransomware Joins Djvu Family Targeting Files for Encryption

Our team discovered Iotr ransomware, which belongs to the Djvu ransomware family, by analyzing malware samples submitted to threat databases. This ransomware encrypts files and renames them with the ".iotr" extension. It also drops a ransom note in the form of a "_readme.txt" file, which provides payment and contact information to victims.

For example, "1.jpg" would be renamed to "1.jpg.iotr" by Iotr ransomware. This malware may be distributed alongside other information-stealing malware such as Vidar or RedLine. The ransom note lists two email addresses, support@freshmail.top and datarestorehelp@airmail.cc, and two prices for decryption, $980 and $490.

The ransom note emphasizes that decryption of the encrypted files requires the correct decryption software and a unique key, which is only available from the attackers. The attackers provide a discounted price of $490 for victims who contact them within 72 hours. Additionally, the ransom note states that the attackers will decrypt one file for free to demonstrate their capability to victims before payment is made.

Iotr Ransom Note Follows Usual Djvu Pattern

The complete text of the Iotr ransom note reads as follows:

ATTENTION!

Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-vdhH9Qcpjj
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
support@freshmail.top

Reserve e-mail address to contact us:
datarestorehelp@airmail.cc

Your personal ID:

How Can You Safeguard Your Data Against Ransomware Similar to Iotr?

Ransomware attacks, such as Iotr, can cause severe damage to your valuable data, but there are several measures you can take to safeguard your data against such attacks. Here are some steps that you can take to protect your data from ransomware:

• Backup your data regularly: It is essential to back up your data frequently to ensure that you can restore your files if your system gets infected with ransomware. Backups can be stored on an external hard drive or in the cloud.
• Install antivirus software: Antivirus software can help protect your system from malware attacks, including ransomware. Make sure your antivirus software is up-to-date to ensure it can detect and remove the latest threats.
• Keep your operating system and software up-to-date: Ensure that you update your operating system, software, and security patches regularly. Cybercriminals often exploit vulnerabilities in outdated software and systems.
• Be cautious when opening emails and attachments: Avoid opening emails or attachments from unknown or suspicious sources. Cybercriminals often use phishing emails to distribute malware.
• Use strong and unique passwords: Use strong and unique passwords for your accounts and avoid using the same password for multiple accounts.
• Educate yourself and your employees: Educate yourself and your employees on how to identify and avoid ransomware attacks. This includes understanding what to look for in suspicious emails or websites and being cautious when downloading files.
• Consider using ransomware protection software: Some security software offers additional protection against ransomware by detecting and blocking ransomware attacks.
• By following these steps, you can significantly reduce the risk of a ransomware attack and protect your data from being encrypted or lost.