Garmin: has the decryption key for WastedLocker Ransomware

Finally, the κατάφερε να αποκτήσει το κλειδί απος για να ανακτήσει τα αρχεία της που είχαν κρυπτογραφηθεί μετά από μια επίθεση με το WastedLocker .

On July 23, 2020, Garmin ceased operations worldwide and its customers could not access Garmin Connect, flyGarmin, Strava, inReach services.

The attackers demanded $ 10 million from the company to give them a decryption key.

Μετά από μια τετραήμερη διακοπή, η Garmin ξαφνικά ανακοίνωσε ότι άρχισαν να αποκαθιστούν τις υπηρεσίες κάτι που έκανε πολλούς να υποπτευθούν ότι πλήρωσε τα λύτρα για να αποκτήσουν τα αποκρυπτογράφησης. Ωστόσο, η εταιρεία αρνήθηκε να αναφέρει κάτι.

Today, BleepingComputer gained access in a package created by Garmin's IT department to decrypt a workstation and then install safety on the machine.

WastedLocker is one ransomware business-oriented and has no weaknesses in the encryption algorithm. This means that there is no free cryptographer.

Έτσι για να αποκτήσει ένα κλειδί αποκρυπτογράφησης, η Garmin θα πρέπει να έχει πληρώσει τα λύτρα στους επιτιθέμενους. Δεν είναι γνωστό το πόσα πλήρωσαν.

The recovery package obtained by BleepingComputer includes various security software installers, a decryption key, a decryptor for WastedLocker, and a which can run all of the above.

The script contains a timestamp '25/07/2020', which shows that the ransom was paid on 24 or 25 July.

Ο αποκρυπτογράφος που συμπεριλαμβάνεται στο πακέτο περιέχει αναφορές τόσο στην εταιρία κυβερνος Emsisoft as well as ransomware trading company, Coveware.

When BleepingComputer contacted Coveware, they said they did not comment on ransomware reported in the media.

A similar answer was given by Emsisoft, which stated that it could not comment, but that they create decryption tools and are not involved in ransom payments.

Emsisoft typically creates custom ransomware decryptors when the tools provided by attackers contain bugs or if the are concerned that they may contain backdoors.

"If the ransom has been paid, but the decryptor provided by the attacker is slow or defective, we can extract the decryption code and create a custom solution that decrypts up to 50% faster with less risk of damage or data loss," she said. Emsisoft on a page of. The Best Technology Site in Greecefgns

Subscribe to via Email

Subscribe to this blog and receive notifications of new posts by email.

Written by giorgos

George still wonders what he's doing here ...

Leave a reply

Your email address is not published. Required fields are mentioned with *

Your message will not be published if:
1. Contains insulting, defamatory, racist, offensive or inappropriate comments.
2. Causes harm to minors.
3. It interferes with the privacy and individual and social rights of other users.
4. Advertises products or services or websites.
5. Contains personal information (address, phone, etc.).