Well-known cybersecurity software company, Avast, has released a decryption utility to help victims of TargetCompany ransomware recover their files for free.
However, Avast warns that this tool can restore encrypted files “under certain circumstances.”
See also: NetWalker ransomware collaborator sentenced to 80 months in prison
Also, victims should be aware that this is a time-consuming process that requires many resources.
“During password cracking, all of your available processor cores will spend most of their computing power to find the decryption password. The cracking process can take a long time, up to dozens of hours,” Avast said.
“The decryption tool saves progress and if you interrupt it and later restart it, it offers you an option to continue the previously started cracking process.“.
The decryption tool for TargetCompany ransomware works by “cracking” the password after comparing an encrypted file with its original, unencrypted version.
Victims of TargetCompany ransomware can download the decryption tool from Avast servers (64-bit or 32-bit) to decrypt entire disk partitions using the instructions displayed in the tool's user interface .
See also: Ransomware gangs are changing tactics and ransoms are increasing!
“On the final page of the wizard, you can choose whether you want to create backup copies of encrypted files. These backups can help if something goes wrong during the decryption process,” Avast added.
“This option is enabled by default, which we recommend. After clicking “ Decrypt “, the decryption process will begin . Let the tool run and wait until it finishes.“.
More information about Avast's decryption tool can be found here.
TargetCompany is a ransomware that has been discovered relatively recently. The group behind it has been active since mid-June 2021 and has been observed adding the .mallox, .exploit, .architek, or .brg extensions to all encrypted files.
See also: Sugar ransomware: New threat targets ordinary users/small businesses
Also, victims see a ransom note named “HOW TO RECOVER !!.TXT“, in all folders with encrypted files.
Avast has also released free decryption tools for the Babuk, AtomSilo, and LockFile ransomware, so victims can recover their files without paying ransom to the attackers.
Source: Bleeping Computer
