Tool rescues GandCrab victims from malicious encryption.

Dark Reading Staff, Dark Reading

October 26, 2018

1 Min Read

GandCrab is one of the more common forms of ransomware afflicting the Internet and now there's a new tool for its victims that decrypts their files without their having to deal with cryptocurrencies and anonymous wallets.

Bitdefender developed the ransomware decryption tool in coordination with Europol, the FBI, Romanian Police, and other law enforcement agencies. The tool allows victims to ignore demands for ransom and retrieve their files. It decrypts the most recent versions of GandCrab-encrypted files. 

In a statement, the company said: "The tool released today can decrypt data ransomed by versions 1, 4 and 5 of the GandCrab malware, as well as all versions of the ransomware for a limited set of victims in Syria."

GandCrab is an example of malware-for-hire, where developers offer it to criminals for a share of the ultimate profits. It is spread to victims through spam email, exploit kits, and various malware loader campaigns.

For more, read here and here.

BHEURUOPE2018-vplug_Web_Banners_468x60_Sponsor.png

 

Black Hat Europe returns to London Dec 3-6 2018  with hands-on technical Trainings, cutting-edge Briefings, Arsenal open-source tool demonstrations, top-tier security solutions and service providers in the Business Hall. Click for information on the conference and to register.

About the Author(s)

Dark Reading Staff

Dark Reading

Dark Reading is a leading cybersecurity media site.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like


More Insights