Mlrd Ransomware Locks Files

The Mlrd ransomware, which belongs to the Djvu family, was discovered during a thorough analysis of new file samples. This malicious software operates by encrypting data and adding the ".mlrd" extension to the affected files. After encryption, Mlrd leaves a ransom note titled "_readme.txt."

Mlrd changes the filenames of the affected files following a specific pattern. For example, "1.jpg" becomes "1.jpg.mlrd," and "2.png" turns into "2.png.mlrd." Given its association with the Djvu family, Mlrd might be distributed alongside other malicious software.

The ransom note from Mlrd ransomware provides two email addresses (support@freshmail.top and datarestorehelp@airmail.cc) and offers victims the option to obtain decryption software and a unique decryption key. The initial cost for decryption services is set at $980. However, if victims reach out to the threat actors within 72 hours, they can get decryption tools at a reduced price of $490.

Additionally, the ransom note mentions that victims can submit a single encrypted file for free decryption, as long as it doesn't contain critical or valuable data.

Mlrd Ransom Note Demands $490

The full text of the Mlrd ransom note reads as follows:

ATTENTION!

Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-xN3VuzQl0a
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.

To get this software you need write on our e-mail:
support@freshmail.top

Reserve e-mail address to contact us:
datarestorehelp@airmail.cc

Your personal ID:

How Can You Protect Your System from Ransomware?

Protecting your system from ransomware requires a combination of proactive measures and good cybersecurity practices. Here are some essential steps to help safeguard your system from ransomware attacks:

Use Reliable Security Software:
Install and regularly update reputable antivirus and anti-malware software on your computer. Ensure it has ransomware protection features.

Keep Software and Operating Systems Up to Date:
Regularly update your operating system, software applications, and plugins. Many ransomware attacks exploit known vulnerabilities, which updates can patch.

Enable Firewall:
Activate your computer's built-in firewall and consider using a network firewall for added protection.

Beware of Suspicious Emails:
Be cautious when opening email attachments or clicking on links, especially if the sender is unknown. Ransomware often spreads through phishing emails.

Backup Your Data:
Regularly back up your important data to an external device or a secure cloud storage service. Ensure backups are not directly accessible from your network.

Use Strong, Unique Passwords:
Create strong and unique passwords for all your accounts. Consider using a password manager to help you manage and generate complex passwords.

Implement Two-Factor Authentication (2FA):
Enable 2FA whenever possible for your online accounts. This adds an extra layer of security, making it harder for attackers to access your accounts.