Η εταιρεία ασφαλείας Avast κυκλοφόρησε σήμερα δωρεάν βοηθητικά προγράμματα αποκρυπτογράφησης (decrypters) για την ανάκτηση αρχείων που έχουν κρυπτογραφηθεί από τα ransomware AtomSilo, Babuk και Lockfile.
The decrypters for AtomSilo and LockFile come in one app because of the similarities between them two ransomware.
"Both AtomSilo ransomware and LockFile are similar and except for minor differences, this application covers both." he says Avast on her blog.
Something big -> I just cracked #AtomSilo - one of the Latest Ransomware Family - More information soon. Stay Tuned. (cde07f39b45b883c861f4d4d0c6afb80)
For more information (Only for trusted Security accounts) DM me.🙏
Please help me to reach more People who could be affected !!!- Jiří Vinopal (@vinopaljiri) October 17, 2021
Avast reported that they were able to break the ransomware's encryption system and create the decryptor using information shared by Jiří Vinopal, a security researcher at RE-CERT, who tweeted earlier this month that he had discovered a way to break the AtomSilo encryption and had already created a proof-of-concept Decrypt.
On the other hand, the decoder for Babuk is coming in a separate application.
Avast said it created the decrypter using the source code of the original Babuk ransomware, which was shared on a Russian-language forum in early September.
In a tweet today, Avast reports that the source code contained decryption keys for older victims.
Thus, the decoder only works for older Babuk victims who have encrypted files with .babuk or .babyk file extensions.