H company ασφαλείας Avast μόλις κυκλοφόρησε 3 νέες εφαρμογές αποencryptionransomware, bringing the total to 14 tools.
“More than 2016 new strains of ransomware were discovered in 200, which is growth in the large spread of malware. The good news is that hundreds of millions of Avast and AVG users are protected from these popular threats," says a post on the company's blog signed by Jakub Kroustek, reverse engineer and Avast malware analyst.
Let's look at 3's new decryption applications:
Decrypting HiddenTear
Ο codeHiddenTear's code was hosted on GitHub, so many hackers were teasing the code and starting to use it. Encrypted files have a wide range of extensions: .locked, .34xxx, .bloccato, .BUGSECCCCC, .Hollycrypt, .lock, .saeid, .unlockit, .razy, .mecpt, .monstro, .lok, .안호화됨, . 8lock8, .fucked, .flyper, .kratos, .krypted, .CAZZO, .doomed, and many more.
Decrypting Jigsaw
The Jigsaw was first spotted in March of 2016.
Encrypted files have one of the following extensions: kkk, .btc, .gws, .j, .encrypted, .porno, .payransom, .pornoransom, .epic, .xyz, .versiegelt, .encrypted, .payb, .pays , .payms, .paymds, .paymts, .paymst, .payrms, .payrmts, .paymrts, .paybtcs, .fun, .hush.
Stampado Decrypting
This ransomware has been around since August 2016 and is being sold on the Dark Web. In dianetwork there are several versions of it and one of them is Philadelphia. Stampado adds the .locked extension to encrypted files.
See the list of Avast tools and look for what it does for you.