Decrypt Jigsaw ransomware for free

Check Point security researchers announced at the weekend that they were able to decipher Jigsaw ransomware in its new and older versions.

Jigsaw ransomware appeared last April, and it differed from the others because if the victim did not pay them άρχιζε να διαγράφει τα from the user's computer. virus Jigsaw ransomware

The researchers managed and developed a Decrypter for Jigsaw ransomware almost immediately after its release, but it stopped working after updates in the ransomware software. Note that Jigsaw is one of the most up-to-date versions of ransomware at this time, with new releases circulating almost weekly.

Η της Check Point υποστηρίζει επίσης ότι εντόπισε μια αδυναμία όχι κατά τη διαδικασία της κρυπτογράφησης, αλλά στο πώς χειρίζεται το κακόβουλο λογισμικό την καταβολή λύτρων.

While other ransomware uses a Tor web page to manage payments, Jigsaw only displays a payment address on the victim's computer with a ransom note and asks users to click “I made a payment, give me back my files!” since of course they make the payment.

Clicking this button launches a request from the user's computer to an online API that checks whether the payment has been accepted by that Bitcoin address.

Check Point created a tool that mimics a positive API response. The tool gives Jigsaw a API response and the ransomware believes the payment has been made, immediately starting the decryption process that ends with unlocking all encrypted files and deleting the malware from the infected system.

You can download it from the link below.

Instructions for use:
1. Open JPS.zip.
2. In the Jigsaw Puzzle Solver folder, right click on 'JPS.exe' and 'run as administrator'.
3. Follow the instructions.

http://blog.checkpoint.com/files/2016/07/JPS_release.zip

iGuRu.gr The Best Technology Site in Greecefgns

every publication, directly to your inbox

Join the 2.090 registrants.

Written by giorgos

George still wonders what he's doing here ...

Leave a reply

Your email address is not published. Required fields are mentioned with *

Your message will not be published if:
1. Contains insulting, defamatory, racist, offensive or inappropriate comments.
2. Causes harm to minors.
3. It interferes with the privacy and individual and social rights of other users.
4. Advertises products or services or websites.
5. Contains personal information (address, phone, etc.).