From today, you can recover your encrypted files free of charge from the malicious software (ransomware) CoinVault and Bitcryptor, thanks to the efforts of the Dutch police and Kaspersky Lab.
Security researchers from Kaspersky Lab and the Dutch public prosecutor's office managed to obtain the last keys encryptions from them servers command and control (C&C) that used two ransomware – CoinVault and Bitcryptor.
The researchers security agencies first noticed attacks from CoinVault ransomware in May 2014. Since then, CoinVault ransomware has infected over 1.500 computers in more than 108 countries.
In April of 2015, the Dutch police authorities were able to obtain the database containing the decryption keys when it seized the CoinVault administration and control server.
These decryption keys were then used by Kaspersky Lab to develop a service Ransοmware decryptor, which included approximately 750 decryption keys retrieved from CoinVault's servers.
Following this raid, CoinVault developers updated the malware code, and finally released a next version of CoinVault called Bitcryptor.
However, last month, Dutch authorities arrested two men associated with CoinVault and Bitcryptor ransomware, and managed to obtain 14.031 decryption keys.
The keys were added to Kaspersky's Ransomware Decryptor service, which can be found on the company's website. (the link is at the end of the publication)
So victims of specific ransomware that still have encrypted data can use the service to unlock their files.
Download Kaspersky's free decrypt:
