TRU8 Ransomware

The TRU8 Ransomware is a piece of malware able to lock the files found on infected computers. Its creators plan to use the locked files as a bargaining chip – they promise to provide the victim with a decryptor, but only if they pay some Bitcoin first. Just like other ransomware creators, the ones behind this file-locker also list their demands in a ransom note, which can be found on all computers infected by the TRU8 Ransomware.

The TRU8 Ransomware also will mark locked files with the extension '[TRU888@QQ.COM].<VICTIM ID>-<VICTIM ID>.TRU8.' The ransom note is stored in a file called '!README_TRU8!.rtf.' Its contents explain the situation to the victim, and tells that they will not be able to use a free decryptor – the only working decryption tool is sold by the criminals.

We advise you to ignore the offer of TRU8 Ransomware's creators and avoid contacting them. Even if you fulfill their demands, it is highly unlikely that they will provide you with a decryptor. The criminals list the emails tru888@qq.com, tru8@protonmail.com, and tru8@tutanota.com, but contacting them would be useless since they do not even offer to decrypt 1-2 files for free.

If the TRU8 Ransomware has damaged your data, you should stay calm and remember that contacting the perpetrators is a terrible idea. Instead, run an anti-malware tool to eliminate the threat, and then explore the best-recommended data recovery tools and options.