Nine months after the launch of the “No More Ransom” (NMR) initiative, more law enforcement agencies and private sector companies have joined the initiative, allowing more ransomware victims to get their files back without paying the criminals.
The platform www.nomoreransom.org is now available in 14 languages and contains 39 free decryption tools. Since our last report in December, more than 10,000 victims from all over the world will have been able to decrypt their “infected” devices thanks to the tools available for free on the platform.
The “No More Ransom” initiative was launched in July 2016 by the Dutch police, Europol, Intel Security and Kaspersky Lab, introducing a new level of cooperation between law enforcement and private companies to fight ransomware together. Since its inception, dozens of partners from all continents have joined. This proves that ransomware is a global problem that needs to be addressed.
The platform's statistics show that most users come from Russia, the Netherlands, the United States, Italy, and Germany.
Previously available in English, Dutch, French, Italian, Portuguese and Russian, the website has now been translated into Finnish, German, Hebrew, Japanese, Korean, Slovenian, Spanish and Ukrainian. More languages are expected to be available soon, in an effort to help victims worldwide.
New partners from the private and public sectors
AVAST, CERT Polska and Eleven Paths (Telfonica's Digital Security Unit) have joined "No More Ransom" as collaborating partners, bringing the number of partners to 7.
With 30 new supporting partners also joining the program, the overall total stands at 76. New law enforcement members to join include Australia, Belgium, INTERPOL, Israel, South Korea, Russia and Ukraine.
Other private actors include Acronis International GmbH, Crowdstrike, Cyber Security Canada, DataGravity, Deloitte, ENISA, Global Cyber Alliance (GCA), Japan Cyber Control Centre (JC3), KUERT Datenrettung Deutschland GmbH, KÜRT Data Recovery and Information Security Co., mnemonic AS, Neutrino Srl, Telecom Portugal, Secura Group Limited, SentinelOne and Verizon Enterprise Solutions. There is also support from the CERT community, represented by AfricaCERT, BA-CSIRT (Buenos Aires Government CSIRT), Centro Nacional de Cibersegurança, Certego Security Incident Response Team, Cybersecurity Malaysia and the Japan Computer Emergency Response Coordination Team (JPCERTCC).
INTERPOL's arrival follows the 2016 Interpol-Europol Cybercrime Conference, highlighting the impact of this user-driven, annual joint event.
New tools
Since the last release, 14 tools have been added to the platform, offering new decryption capabilities for ransomware victims:
AVAST: Alcatraz Decryptor, Bart Decryptor, Crypt888 Decryptor, HiddenTear Decryptor, Noobcrypt Decryptor and Cryptomix Decryptor
CERT Polska: Cryptomix/Cryptoshield decryptor
Check Point: Merry X-Mas Decryptor and BarRax Decryptor
Eleven Paths – Telefonica Cyber Security Unit: Popcorn Decryptor
Emsisoft: Crypton Decryptor and Damage Decryptor
Kaspersky Lab: Updates on Rakhni and Rannoh Decryptors
More information and prevention tips are available on the website www.nomoreransom.org.
