Recovering From the LokiLok Ransomware Attack

LokiLok Ransomware is a file-encryption Trojan that could cause long-lasting damage to your files, leaving you with few viable recovery options. This ransomware is not brand new, and it appears to be an updated version of the Chaos Ransomware, which has been a major threat for the past few years. Thankfully, this particular ransomware family is not very active, so we rarely see newly spawned variants like the LokiLok Ransomware.

The criminals operating this threat are probably distributing it through the use of misleading emails, fake downloads, pirated content, and other malicious content. The goal is to get users to open a malicious file, which would initialize the LokiLok Ransomware and set off the data encryption process. The latter is usually completed in just a few minutes, so victims will have no time to react unless they have made sure to protect their device with a reputable anti-malware software suite.

The LokiLok Ransomware locks files and adds the '.LokiLok' extension to their names, before finishing off the attack with the creation of the ransom message 'read_me.txt.'

The ransom note tells victims that the only way to get their files back is to pay for their decryption. The crooks do not specify a ransom amount and, instead, they advise the victim to send a message to tutanota101214@tutanota.com for more instructions. The criminals also offer to unlock 1-2 small files for free, to prove their credibility. We advise you not to trust the hackers behind the LokiLok Ransomware – they could take your money without giving you anything in return. The best course of action is to eliminate the malicious app with the help of antivirus software, and then explore alternative data recovery options.