Η company security firm Avast today released free decrypters to recover files encrypted by AtomSilo, Babuk and LockFile ransomware.
The decrypters for AtomSilo and LockFile come in one application due to the similarities between the two ransomware.
"Both AtomSilo ransomware and LockFile are similar and except for minor differences, this application covers both." he says Avast on her blog.
Something big -> I just cracked #AtomSilo - one of the Latest Ransomware Family - More information soon. Stay Tuned. (cde07f39b45b883c861f4d4d0c6afb80)
For more information (Only for trusted Security accounts) DM me.🙏
Please help me to reach more People who could be affected !!!- Jiří Vinopal (@vinopaljiri) October 17, 2021
Avast reported that they were able to crack the encryption system of the ransomware and create the decryptor using information shared by Jiří Vinopal, a security researcher at RE-CERT, who tweeted earlier this month that he had discovered a way to break AtomSilo's encryption and had already built a proof-of-concept decrypter.
On the other hand, the decoder for Babuk is coming in a separate application.
Avast said it created the decrypter using the source code of the original Babuk ransomware, which was shared on a Russian-language forum in early September.
In a tweet today, Avast reports that the source code contained decryption keys for older victims.
So the decryptor only works for older Babuk victims who have encrypted archives with the file extensions .babuk or .babyk.
