Nnll Ransomware Encrypts Most Files

We came across the Nnll ransomware variant while examining recent file sample submissions. Ransomware functions by encrypting data and then demanding a ransom for its decryption.

When the Nnll ransomware executes, it encrypts files and appends a ".nnll" extension to their filenames. For instance, an original file named "1.jpg" becomes "1.jpg.nnll," and "2.png" becomes "2.png.nnll," and so on. Once this encryption process is complete, a ransom note titled "_Readme.txt" is generated.

The ransom note associated with Nnll ransomware provides assurance to the victim that their encrypted databases, documents, photos, and other essential files can be recovered. It directs the victim to procure the decryption key and software from the malicious actors. The cost of this service is $980, with the possibility of a 50% reduction ($490) if the victim contacts the cybercriminals within 72 hours. Before making the payment, the victim can verify the decryption process by sending the attackers a single encrypted file.

Nnll Promises Decryption of a Single File

The complete text of the Nnll ransom note reads as follows:

ATTENTION!

Don’t worry, you can return all your files!
All your files like photos, databases, documents and other important are encrypted
with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-O0PCajl3M8
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that’s price for you is $490.
Please note that you’ll never restore your data without payment.
Check your e-mail “Spam” or “Junk” folder if you don’t get answer more than 6 hours.

To get this software you need write on our e-mail:
datarestorehelp@proton.me

Reserve e-mail address to contact us:
supportsys@airmail.cc

Your personal ID:

How Can You Best Protect Your System Against Ransomware Attacks?

Protecting your system against ransomware attacks requires a combination of proactive measures and cybersecurity best practices. Here are some effective ways to safeguard your system from ransomware:

• Keep Software Updated: Ensure that your operating system, applications, and security software are regularly updated with the latest security patches. Many ransomware attacks exploit known vulnerabilities that could have been prevented with updates.
• Use Reliable Security Software: Install reputable antivirus and anti-malware software on your system. Ensure it is set to automatically update and conduct regular scans. Some security software also offers ransomware-specific protection features.
• Backup Your Data: Regularly back up your important data to an offline or cloud-based backup solution. In the event of a ransomware attack, having backup copies of your files will allow you to restore your data without paying the ransom.
• Enable Firewall: Activate and configure a firewall on your system. Firewalls can help block unauthorized access and prevent malicious software from spreading.
• Exercise Caution with Email: Be cautious when opening email attachments or clicking on links, especially if the sender is unknown or the email appears suspicious. Cybercriminals often use phishing emails to distribute ransomware.
• Disable Macros: Disable macros in documents, especially if they are received from untrusted sources. Macros are a common method for delivering ransomware.
• Use Strong Passwords: Implement strong, unique passwords for all your accounts and enable two-factor authentication (2FA) whenever possible. This will make it more difficult for attackers to gain unauthorized access to your systems.