A few days ago, the Hellenic Cybercrime Investigation Department issued a press release warning the Greek online community about the appearance of Locky ransomware. However, since technology is advancing and they probably didn't catch the good news early, we will announce it to you. 
The developer of the encryption software used by the Locky ransomware has released decryption keys for victims of the malware.
The files of users affected by the ransomware are locked with AES encryption. All files affected by the malware have the .locked extension, which will not go away unless the affected users pay the ransom demanded by the crooks. (0.5 BTC is about $210).
The unknown developer of Locky uses EDA2 software for encryption.
Big mistake.
The developer of the EDA2 project intentionally left a backdoor in his code to ensure that he could control potential abuses of the software.
So Utku Sen, the man behind the project, in this case had a way to obtain the decryption keys, which he immediately made freely available for download. (The download link is at the end of the post).
Here we should mention that the malware developers will not remain idle, and we believe that Locky will return with a new version.
However, those who have been infected can unlock their files without paying the ransom. Decrypt your files with the keys below, and next time be more careful about the files you download to your computer. Not everyone's intentions are the same.
Update: After further investigation, since we did not have a computer infected with Locky, we found that the specific keys do not refer to files that are encrypted and have the .locky suffix. Therefore, they refer to a different malware.
