Security company Avast has just released 3 new ransomware decryption applications, reaching the 14 tools altogether.
"In 2016, more than 200 new ransomware strains were discovered, which is a development of the widespread spread of malware. The good news is that hundreds of millions of Avast and AVG users are protected from these popular threats, ”says a post on the company's blog by Jakub Kroustek, Avast reverse engineer and malware analyst.
Let's look at 3's new decryption applications:
Decrypting HiddenTear
HiddenTear's code was hosted on GitHub, so many hackers they were teasing the code and starting to use it. Encrypted files have a wide range of extensions: .locked, .34xxx, .bloccato, .BUGSECCCC, .Hollycrypt, .lock, .saeid, .unlockit, .razy, .mecpt, .monstro, .lok, .안호화됨, . 8lock8, .fucked, .flyper, .kratos, .krypted, .CAZZO, .doomed, and many more.
Decrypting Jigsaw
The Jigsaw was first spotted in March of 2016.
Encrypted files have one of the following extensions: kkk, .btc, .gws, .J, .encrypted, .porno, .payransom, .pornoransom, .epic, .xyz, .versiegelt, .encrypted, .payb, .pays, .payms, .paymds, .paymts, .paymst, .payrms, .payrmts, .paymrts, . paybtcs, .fun, .hush.
Stampado Decrypting
This ransomware has been around since August 2016 and is being sold on the Dark Web. In dianetwork there are several versions of it and one of them is Philadelphia. Stampado adds the .locked extension to encrypted files.
See the list of Avast tools and look for what it does for you.
