Security company Avast has just released 3 new ransomware decryption applications, reaching the 14 tools altogether.
“More than 2016 new strains of ransomware were discovered in 200, which is growth in the large spread of malware. The good news is that hundreds of millions of Avast and AVG users are protected from these popular threats," says a post on the company's blog signed by Jakub Kroustek, Avast's reverse engineer and malware analyst.
Let's look at 3's new decryption applications:
Decrypting HiddenTear
HiddenTear's code was hosted on GitHub, so many hackers teased the code and started using it. Encrypted files have a wide range of extensions: .locked, .34xxx, .bloccato, .BUGSECCCCC, .Hollycrypt, .lock, .saeid, .unlockit, .razy, .mecpt, .monstro, .lok, .안호화됨, . 8lock8, .fucked, .flyper, .kratos, .krypted, .CAZZO, .doomed, and many more.
Decrypting Jigsaw
The Jigsaw was first spotted in March of 2016.
Encrypted files have one of the following extensions: kkk, .btc, .gws, .j, .encrypted, .porno, .payransom, .pornoransom, .epic, .xyz, .versiegelt, .encrypted, .payb, .pays , .payms, .paymds, .paymts, .paymst, .payrms, .payrmts, .paymrts, .paybtcs, .fun, .hush.
Stampado Decrypting
This ransomware has been released since August of 2016 and is sold on Dark Web. Various versions are released on the internet and one of them is Philadelphia. Stampado adds the .locked extension to encrypted files.
See the list of Avast tools and look for what it does for you.
George is still wondering what he is doing here….
