Avast security company today released free decrypters for recovering files encrypted by ransomware AtomSilo, Babuk and LockFile.
The decrypters for AtomSilo and LockFile come in one app because of the similarities between them two ransomware.
"Both AtomSilo ransomware and LockFile are similar and except for minor differences, this application covers both." he says Avast on her blog.
Something big -> I just cracked #AtomSilo – one of the Latest Ransomware Family - Blackberries information soon. Stay Tuned. (cde07f39b45b883c861f4d4d0c6afb80)
For more information (Only for trusted Security accounts) DM me.🙏
Please help me to reach more People who could be affected !!!- Jiří Vinopal (@vinopaljiri) October 17, 2021
Avast reported that they were able to break the ransomware's encryption system and create the decryptor using information shared by Jiří Vinopal, a security researcher at RE-CERT, who tweeted earlier this month that he discovered a way to break την κρυπτογράφηση του AtomSilo και είχε ήδη δημιουργήσει ένα proof-of-concept decrypter.
On the other hand, the decoder for Babuk is coming in a separate application.
Avast said it created the decrypter using the source code of the original Babuk ransomware, which was shared on a Russian-language forum in early September.
In a tweet today, Avast reports that the source code contained decryption keys for older victims.
Thus, the decoder only works for older Babuk victims who have encrypted files with .babuk or .babyk file extensions.