Nztt Ransomware Will Hold Your Data Hostage
During the assessment of malware samples, our team encountered the Nztt ransomware, which is a variant associated with the Djvu malware family. When a computer is compromised, Nztt encrypts diverse files and appends the ".nztt" extension to their original filenames. To illustrate, a file named "1.jpg" changes into "1.jpg.nztt," and "2.png" becomes "2.png.nztt," and so forth.
In addition to its capacity for file encryption, Nztt also generates a ransom note presented as a text file named "_readme.txt". Furthermore, the distribution of Nztt might involve collaboration with information-stealing malware like Vidar and RedLine. The ransom note discovered within the "_readme.txt" file emphasizes that the decryption process relies on specialized decryption software and a unique key. Victims are instructed to establish communication with the attackers via provided email addresses (support@freshmail.top or datarestorehelp@airmail.cc) to receive further guidance.
Furthermore, the ransom note specifies two amounts, $980 and $490, suggesting that victims can potentially access the decryption tools at a discounted rate if they initiate contact with the attackers within a 72-hour timeframe.
Nztt Ransom Note Doubles Ransom in Three Days
The complete text of the Nztt ransom note reads as follows:
ATTENTION!
Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-E4b0Td2MBH
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.To get this software you need write on our e-mail:
support@freshmail.topReserve e-mail address to contact us:
datarestorehelp@airmail.ccYour personal ID:
How Can You Safeguard Your Valuable Data Against Ransomware Attacks?
Safeguarding your valuable data against ransomware attacks requires a multi-layered approach that combines technological measures, best practices, and user awareness. Here's how you can protect your data:
Regular Backups: Maintain frequent backups of your important data on offline or cloud storage. Ensure backups are not continuously connected to your network to prevent them from being compromised during an attack.
Update Software: Keep your operating system, software applications, and security software up-to-date with the latest patches and updates. Ransomware often exploits known vulnerabilities.
Strong Security Software: Install reputable antivirus and anti-malware software that can detect and prevent ransomware infections. Keep these tools updated for optimal protection.
Email Vigilance: Be cautious when opening email attachments or clicking on links, especially if they are from unknown or suspicious sources. Verify the sender's authenticity before taking any action.
Software Restrictions: Use administrative controls to restrict the execution of files from temporary folders and from locations commonly used by ransomware.
Network Segmentation: Separate critical data from regular network resources. Implement network segmentation to limit the lateral movement of ransomware within your network.
Firewalls and Intrusion Detection Systems: Utilize firewalls and intrusion detection systems to monitor network traffic and identify any unusual or suspicious activity.
