Lucifer Ransomware

The Lucifer Ransomware is malware that has the ability to cause devastating damage to your file system by encrypting the data you use on a daily basis. The authors of the Lucifer Ransomware have programmed the malware to target popular file types such as documents, media, archives and others. By targeting these files, the Lucifer Ransomware makes sure that its victims will want to restore access to their files at any cost.

Of course, the criminals plan to extort the victim for money. After the Lucifer Ransomware infects a system successfully, it will begin to encrypt and rename files. The locked files will be recognizable by the new extension added to their names – '.id-<VICTIM ID>.lucifer.' The ransomware also creates the ransom message 'HELP_DECRYPT_YOUR_FILES.txt' and 'HELP_DECRYPT_YOUR_FILES.html.'

The message left by Lucifer Ransomware's creators says that the victim has to pay a ransom fee via Bitcoin to receive a working decryptor. They are also warned that they must comply with this request in the next 48 hours or the fee will be doubled. If the fee is not paid in 72 hours, the criminals threaten to delete the victim's files' unique decryption key.

The criminals use the Telegram ID 'How_Decrypt_Files,' but we would not advise you to get in touch with them. Sending money to them is unlikely to yield positive results, and you are more likely to end up without your files and money. Victims of the Lucifer Ransomware need to use an anti-virus scanner to terminate the threat and then experiment with the best data recovery tools available online.