Starting today you can recover your encrypted files from CoinVault ransomware for free and Bitcryptor, thanks to the efforts of the Dutch police and Kaspersky Lab.
Security investigators at Kaspersky Lab and the Dutch public prosecutor's office have obtained the latest encryption keys from management and control (C&C) servers using two ransomware - CoinVault and Bitcryptor.
Security researchers noticed for the first time attacks by CoinVault ransomware in May 2014. Since then, CoinVault ransomware has infected over 1.500 computers in over 108 countries.
In April of 2015, the Dutch police authorities were able to obtain the database containing the decryption keys when it seized the CoinVault administration and control server.
These decryption keys were then used by Kaspersky Lab to develop a Ransomware Decryptor service, which included about 750 decryption keys retrieved by CoinVault servers.
After this raid, CoinVault's developers updated the malware's code, eventually releasing a new version of CoinVault called Bitcryptor.
However, last month, Dutch authorities arrested two men associated with CoinVault and Bitcryptor ransomware, and managed to obtain 14.031 decryption keys.
The keys have been added to Kaspersky's Ransomware Decryptor service, which you'll find on its website companys. (the link is at the end of the post)
So victims of specific ransomware that still have encrypted data can use the service to unlock their files.
Download Kaspersky's free decrypt:
