Users dodge a bullet, ransomware can be easily decrypted

Dec 2, 2015 13:53 GMT  ·  By

A new type of ransomware that has been doing a lot of damage lately has been cracked, and now, users can brute-force their way through the encryption and free their previously encoded files.

The ransomware, which nobody bothered to name, is known by two names "[email protected]" and "[email protected]," after two of the email addresses where the users are told to contact the malware's author for decryption services and with payment details.

As the users on the Sensors Tech Forum have found out, there is an alternative to paying the ransom, and it relies on using Kaspersky's RakhniDecryptor to brute-force through the ransomware's file encryption mechanism.

Just in case you need some help with the tool, the guys at Bleeping Computer have put together a tutorial on how to use the RakhniDecryptor to decrypt [email protected] files. Just be aware that the decryption process may sometimes take hours but will also span for days in some situations.

In case you are infected with some other sort of unknown ransomware, Kaspersky's RakhniDecryptor is a tool to keep in mind, and try to brute-force your way through the encryption before giving up on your files or paying the ransom.

The Kaspersky RakhniDecryptor can be downloaded via Kaspersky's website, but we've also set up a download mirror for you on Softpedia as well.

Kaspersky RakhniDecryptor
Kaspersky RakhniDecryptor

Photo Gallery (2 Images)

helpme@freespeechmail.org ransom screen
Kaspersky RakhniDecryptor
Open gallery