AES-NI Ransomware Dev Releases Decryption Keys Amid Fears of Being Framed for XData Outbreak

itman · May 25, 2017

The scumbags are "feeling the heat."

On May 21st, a security researcher who goes by the name Thyrex, received a message on a Russian forum that contained a link to a ZIP file that supposedly contained a decryptor for the frogobig777@india.com variant of the AES-NI Ransomware. After examining the file, Thyrex posted a link to the file in our AES-NI Support Topic so that victim's could hopefully use it to recover their files.

Insider this folder are three files; a decryptor executable, a text file that contains instructions, and a folder of 369 private decryption keys.

While no victim's have reported that the decryptor worked for them, I have been able to find an encrypted file from this variant and decrypt it using one of the included keys. If anyone has their files encrypted and the ransom note contains a contact email of frogobig777@india.com, they should definitely see if their key is in the archive and use it to recover their files.
Click to expand...

https://www.bleepingcomputer.com/ne...mid-fears-of-being-framed-for-xdata-outbreak/

Log in or Sign up

AES-NI Ransomware Dev Releases Decryption Keys Amid Fears of Being Framed for XData Outbreak

itman Registered Member

Log in or Sign up

AES-NI Ransomware Dev Releases Decryption Keys Amid Fears of Being Framed for XData Outbreak

itman Registered Member

Useful Searches