Latest Decryption Key news

HelloKitty ransomware rebrands, releases CD Projekt and Cisco data

An operator of the HelloKitty ransomware operation announced they changed the name to 'HelloGookie,' releasing passwords for previously leaked CD Projekt source code, Cisco network information, and decryption keys from old attacks..
- Bill Toulas
- April 19, 2024
- 03:20 PM
- 4
New Marvin attack revives 25-year-old decryption flaw in RSA

A flaw related to the PKCS #1 v1.5 padding in SSL servers discovered in 1998 and believed to have been resolved still impacts several widely-used projects today.
- Bill Toulas
- October 01, 2023
- 10:16 AM
- 1
Police tricks DeadBolt ransomware out of 155 decryption keys

The Dutch National Police, in collaboration with cybersecurity firm Responders.NU, tricked the DeadBolt ransomware gang into handing over 155 decryption keys by faking ransom payments.
- Sergiu Gatlan
- October 14, 2022
- 05:27 PM
- 7
MEGA fixes critical flaws that allowed the decryption of user data

MEGA has released a security update to address a set of severe vulnerabilities that could have exposed user data, even if the data had been stored in encrypted form.
- Bill Toulas
- June 22, 2022
- 11:00 AM
- 1
The Week in Ransomware - February 11th 2022 - Maze, Egregor decryptors

We saw the Maze ransomware developers reemerge briefly this week as they shared the master decryption keys for the Egregor, Maze, and Sekhmet ransomware operations.
- Lawrence Abrams
- February 11, 2022
- 04:57 PM
- 0
Ransomware dev releases Egregor, Maze master decryption keys

The master decryption keys for the Maze, Egregor, and Sekhmet ransomware operations were released last night on the BleepingComputer forums by the alleged malware developer.
- Lawrence Abrams
- February 09, 2022
- 10:26 AM
- 4
BlackByte ransomware decryptor released to recover files for free

A free decryptor for the BlackByte ransomware has been released, allowing past victims to recover their files for free.
- Lawrence Abrams
- October 19, 2021
- 10:51 AM
- 2
REvil ransomware devs added a backdoor to cheat affiliates

Cybercriminals are slowly realizing that the REvil ransomware operators have been hijacking ransom negotiations, to cut affiliates out of payments.
- Ionut Ilascu
- September 23, 2021
- 02:26 AM
- 0
Ransomware gang threatens to wipe decryption key if negotiator hired

The Grief ransomware gang is threatening to delete victim's decryption keys if they hire a negotiation firm, making it impossible to recover encrypted files.
- Lawrence Abrams
- September 15, 2021
- 02:22 PM
- 1
Ragnarok ransomware releases master decryptor after shutdown

Ragnarok ransomware gang appears to have called it quits and released the master key that can decrypt files locked with their malware.
- Ionut Ilascu
- August 26, 2021
- 06:36 PM
- 0
SynAck ransomware decryptor lets victims recover files for free

Emsisoft has released a decryptor for the SynAck Ransomware, allowing victims to decrypt their encrypted files for free.
- Lawrence Abrams
- August 20, 2021
- 02:02 PM
- 0
SynAck ransomware releases decryption keys after El_Cometa rebrand

The SynAck ransomware gang released the master decryption keys for their operation after rebranding as the new El_Cometa group.
- Lawrence Abrams
- August 13, 2021
- 11:20 AM
- 0
Kaseya's universal REvil decryption key leaked on a hacking forum

The universal decryption key for REvil's attack on Kaseya's customers has been leaked on hacking forums allowing researchers their first glimpse of the mysterious key.
- Lawrence Abrams
- August 11, 2021
- 02:01 AM
- 8
Kaseya obtains universal decryptor for REvil ransomware victims

Kaseya received a universal decryptor that allows victims of the July 2nd REvil ransomware attack to recover their files for free.
- Lawrence Abrams
- July 22, 2021
- 01:46 PM
- 1
Avaddon ransomware's exit sheds light on victim landscape

A new report analyzes the recently released Avaddon ransomware decryption keys to shed light on the types of victims targeted by the threat actors and potential revenue they generated throughout their operation.
- Lawrence Abrams
- June 15, 2021
- 05:53 PM
- 1
Avaddon ransomware shuts down and releases decryption keys

The Avaddon ransomware gang has shut down operation and released the decryption keys for their victims to BleepingComputer.com.
- Lawrence Abrams
- June 11, 2021
- 12:10 PM
- 9
Ransomware admin is refunding victims their ransom payments

After recently announcing the end of the operation, the administrator of Ziggy ransomware is now stating that they will also give the money back.
- Ionut Ilascu
- March 28, 2021
- 06:53 PM
- 4
Ziggy ransomware shuts down and releases victims' decryption keys

The Ziggy ransomware operation has shut down and released the victims' decryption keys after concerns about recent law enforcement activity and guilt for encrypting victims.
- Lawrence Abrams
- February 07, 2021
- 01:53 PM
- 1
New Fonix ransomware decryptor can recover victim's files for free

Kaspersky has released a decryptor for the Fonix Ransomware (XONIF) that allows victims to recover their encrypted files for free.
- Lawrence Abrams
- February 03, 2021
- 05:55 PM
- 1
Fonix ransomware shuts down and releases master decryption key

The Fonix Ransomware operators have shut down their operation and released the master decryption allowing victims to recover their files for free.
- Lawrence Abrams
- January 29, 2021
- 09:20 PM
- 3