Hack Forums
Kaspersky releases decryption tool that unlocks ransomware - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Keyloggers (https://hackforums.net/forumdisplay.php?fid=113)
+---- Thread: Kaspersky releases decryption tool that unlocks ransomware (/showthread.php?tid=4779053)



Kaspersky releases decryption tool that unlocks ransomware - ZuGgY - Apr 14, 2015

Quote:Hack concept with the focus on the return button overlaid with binary code
You never should have clicked on the email attachment from that Nairobian prince. Now ransomware's got you locked out of your own computer and is demanding money before you can use it again. But before you reach for you wallet, take a look at this decryption key generator that Kaspersky has built. The Netherland's National High Tech Crime Unit (NHTCU) recently got its hands on a CoinVault command-and-control server (a type of ransomware that has been infecting Windows systems since last November) and, upon examining it, discovered a large database of decryption keys. The NHTCU shared this information with Kaspersky which used it to build the Noransomware decryption tool. Granted, the program isn't 100 percent effective yet -- it's not like the NHTCU got all of the potential keys off of that one server or anything -- but as police forces around the world continue to investigate the CoinVault ransom campaign, Kaspersky expects to grow the key database and further improve the tool's functionality. Plus, it's still better than paying some schmuck hacker to give you back your digital dominion.


Source

https://noransom.kaspersky.com/

Hope this will be very handy for many people in the future.


* - archangel.dmitry - Apr 16, 2015

After authors of ransom software get their hands on it, it will stop being effective at all. I am pretty sure it is useless against CryptoWall 3.X.


* - NoScript - Apr 17, 2015

(Apr 16, 2015 10:19 AM)archangel.dmitry Wrote:  After authors of ransom software get their hands on it, it will stop being effective at all. I am pretty sure it is useless against CryptoWall 3.X.

Well if they somehow bypass the tool all Kaspersky has to do is just update the tool yet again and they may fix the issue but I doubt they would update the tool from time to time because of that issue.


* - BeNT- - Apr 17, 2015

Cool, interesting post OP.

It sounds like they are not making the database entirely public (obviously), but interesting

B.


* - Laughing Man - Apr 18, 2015

I got a really cool email about this because I'm a K.I.S subscriber.


* - Eternal. - Apr 18, 2015

This is awesome, good to know. Thank you.