Security company Avast has just released 3 new ransomware decryptors, bringing the total to 14 tools.
"Κατά το 2016 ανακαλύφθηκαν περισσότερα από 200 νέα στελέχη ransomware, κάτι που είναι ανάπτυξη της μεγάλης εξάπλωσης του κακόβουλου software. The good news is that hundreds millions χρήστες του Avast και του AVG προστατεύονται από αυτές τις δημοφιλείς απειλές" αναφέρει ένα post στο blog της εταιρείας που υπογράφεται από τον Jakub Kroustek, reverse engineer και malware Avast analyst.
Let's look at 3's new decryption applications:
"Decrypting HiddenTear"
Ο codeHiddenTear's code was hosted on GitHub, so many hackers were teasing the code and starting to use it. Encrypted files have a wide range of extensions: .locked, .34xxx, .bloccato, .BUGSECCCCC, .Hollycrypt, .lock, .saeid, .unlockit, .razy, .mecpt, .monstro, .lok, .안호화됨, . 8lock8, .fucked, .flyper, .kratos, .krypted, .CAZZO, .doomed, and many more.
"Decrypting Jigsaw"
The Jigsaw was first spotted in March of 2016.
Encrypted files have one of the following extensions: kkk, .btc, .gws, .j, .encrypted, .porno, .payransom, .pornoransom, .epic, .xyz, .versiegelt, .encrypted, .payb, .pays , .payms, .paymds, .paymts, .paymst, .payrms, .payrmts, .paymrts, .paybtcs, .fun, .hush.
"Decrypting Stampado"
This ransomware has been released since August of 2016 and is sold on Dark Web. Various versions are released on the internet and one of them is Philadelphia. Stampado adds the .locked extension to encrypted files.
See the list of Avast tools and look for what it does for you.
