From today, you can recover your encrypted files free of charge from the malicious software (ransomware) CoinVault and Bitcryptor, thanks to the efforts of the Dutch police and Kaspersky Lab.
Security researchers from Kaspersky Lab and the Dutch public prosecutor's office managed to obtain the last keys encryptions from the command and control (C&C) servers that used two ransomware – CoinVault and Bitcryptor.
Security researchers first observed attacks from CoinVault ransomware in May of 2014. Since then, CoinVault ransomware has infected more than 1.500 computers in more than 108 countries.
In April of 2015, the Dutch police authorities were able to obtain the database containing the decryption keys when it seized the CoinVault administration and control server.
These decryption keys were then used by Kaspersky Lab to develop a Ransomware service decryptor, which included approximately 750 decryption keys retrieved from CoinVault's servers.
After this raid, CoinVault's developers updated the malware's code, eventually releasing a new version of CoinVault called Bitcryptor.
However, last month, Dutch authorities arrested two men associated with CoinVault and Bitcryptor ransomware, and managed to obtain 14.031 decryption keys.
The keys have been added to Kaspersky's Ransomware Decryptor service, which you'll find at by clicking here the company's. (the link is at the end of the post)
So victims of specific ransomware that still have encrypted data can use the service to unlock their files.
Download Kaspersky's free decrypt: