Security company Avast has just released 3 new ransomware decryption applications, bringing the total to 14 tools.
“More than 200 new ransomware strains were discovered in 2016, which is a growth in the widespread spread of malware. The good news is that hundreds of millions of Avast and AVG users are protected from these popular threats,” says a blog post by Jakub Kroustek, reverse engineer and malware analyst at Avast.
But let's look at the 3 new decryption applications:
“Decrypting HiddenTear”
The code for HiddenTear was hosted on GitHub, so many hackers were tinkering with the code and starting to use it. The encrypted files have a wide range of extensions: .locked, .34xxx, .bloccato, .BUGSECCCC, .Hollycrypt, .lock, .saeid, .unlockit, .razy, .mecpt, .monstro, .lok, .암호화됨, .8lock8, .fucked, .flyper, .kratos, .krypted, .CAZZO, .doomed, and many more.
“Decrypting Jigsaw”
Jigsaw was first spotted in March 2016.
Encrypted files have one of the following extensions: kkk, .btc, .gws, .J, .encrypted, .porno, .payransom, .pornoransom, .epic, .xyz, .versiegelt, .encrypted, .payb, .pays, .payms, .paymds, .paymts, .paymst, .payrms, .payrmts, .paymrts, .paybtcs, .fun, .hush.
“Decrypting Stampado”
This ransomware has been around since August 2016 and is sold on the Dark Web. There are many versions of it circulating online, one of which is Philadelphia. Stampado adds the .locked extension to encrypted files.
Check out the list of Avast tools and look for what it does for you.
