TomLe Ransomware

The TomLe Ransomware was discovered only recently, but, unfortunately, this file-locker has already caused problems for dozens of users worldwide. The TomLe Ransomware uses the same encryption method as the infamous Dharma Ransomware, and, unfortunately, this means that its victims will be unable to use a free data decryption tool. The TomLe Ransomware's encryption is only reversible by using the unique decryption key that was generated during the attack and transferred to the servers of the attackers.

Users can recognize TomLe Ransomware's attack by the extension that the malware uses to mark damaged files – '.id-<VICTIM ID>.[TomLee240@aol.com].TomLe.' Another change that victims of this ransomware will see is the file 'FILES ENCRYPTED.txt' on their desktop – the document contains a message from the attackers, as well as their demands and contact details.

The criminals use the addresses tomlee24@tuta.io and tomlee240@aol.com to contact their victims. They also ask for a ransom payment via Bitcoin but fail to provide proof that they own a working decryptor. Paying them is not recommended since you are likely to end up tricked.

The only reliable way to restore files damaged by the TomLe Ransomware is to use a recent backup copy of your data. If a backup is not at hand, it is recommended to try other popular data recovery tools after you make sure to eliminate the TomLe Ransomware with the use of a reputable anti-virus tool.