[NoMoreRansom]Law enforcement and IT security companies join forces to fight ransomware

FanJ · Jul 25, 2019

ronjor said: ↑

The quiet scheme saving thousands from ransomware
Click to expand...

Thanks Ron !

The No More Ransom project exists now three years. It was launched on 25 July 2016.

I would have expected a Press Release from Europol, but I cannot find it at the moment.

It's worth to read that BBC article.
Fabian Wosar of Emsisoft is quoted in that article. Some quotes:

Mr Wosar told BBC News: "Projects like No More Ransom have been crucial when it comes to fighting ransomware on a global level, with pretty much all major parties cooperating on a global and daily basis, sharing intel[igence] in real-time - except for the US.

"The US should consider the success of the No More Ransom Project to be a call to action.

"Better cooperation between the private sector and law enforcement could result in fewer ransom demands being paid.

"That would make cyber-crime less profitable and, consequently, reduce the financial incentive for groups to commit cyber-crime."
Click to expand...

==========

BTW: As we know there is also this site:
ID Ransomware
https://id-ransomware.malwarehunterteam.com/
It was mentioned here:
https://www.wilderssecurity.com/threads/before-you-pay-that-ransomware-demand.390879/
People can get for help to https://www.bleepingcomputer.com/forums/f/239/ransomware-help-tech-support/

FanJ · Jul 26, 2019

Europol Press Release - 26 July 2019
No More Ransom: 108 million reasons to celebrate its third anniversary
https://www.europol.europa.eu/newsr...on-reasons-to-celebrate-its-third-anniversary

Today marks the third anniversary of the No More Ransom, initiative that has helped more than 200 000 victims of ransomware recover their files free of charge since it was first launched in July 2016. With visitors from 188 countries, the project has become a one-stop shop for the victims of ransomware, registering already over 3 million individual visits in its short life span. Thanks to the cooperation between more than 150 partners(1), the criminal business model behind ransomware has been severely hit since the initiative was launched, resulting in some $108 million profit prevented from going to the wrong pockets.
Click to expand...

With 14 new tools added in 2019, the portal can now decrypt 109 different types of ransomware infections – a number that keeps growing on a monthly basis. The efforts against GandCrab – considered to be one of the most aggressive ransomware attacks last year, epitomizes such a success: Since the release of the first GandCrab tool in February 2018, nearly 40 000 people have successfully decrypted their files, saving roughly $50 million in ransom payments.
Click to expand...

Read more there !!

Infographic:
Infographic 3rd Anniversary No More Ransom!
https://www.europol.europa.eu/publications-documents/infographic-3rd-anniversary-no-more-ransom
pdf : https://www.europol.europa.eu/sites/default/files/documents/infographic_3anniversary.pdf

PS:
There seems to be also a real behind-the-scene story of the initiative here:
https://www.europol.europa.eu/eupro...w-eu-protects-our-computers-cybercriminals_en
but that link doesn't work for me ...

FanJ · Jul 29, 2019

FanJ said: ↑

PS:
There seems to be also a real behind-the-scene story of the initiative here:
https://www.europol.europa.eu/eupro...w-eu-protects-our-computers-cybercriminals_en
but that link doesn't work for me ...
Click to expand...

I suppose that link should have been:
https://europa.eu/euprotects/our-sa...w-eu-protects-our-computers-cybercriminals_en

Edit 29 July 2019 :
I got in contact with them and the link was quickly fixed

guest · Aug 16, 2019

Dutch cops help over 300 decrypt ransomware
August 15, 2019
https://nltimes.nl/2019/08/15/dutch-cops-help-300-decrypt-ransomware

Online platform No More Ransom, launched by the Dutch police, helped at least 300 Dutch people get rid of ransomware on their computers in the three years of its existence. Over 2.5 million people worldwide have consulted the platform, the police said in a statement on Thursday.

The idea for the No More Ransom platform came to the police after the arrest of two brothers from Amersfoort, who had extorted money out of many people worldwide by infecting their computers with ransomware - a type of malware that locks access to your files unless you pay the person behind it a 'ransom' for a key to decrypt your files. [...] But this Dutch case turned out to be the ideal starting point for the establishment of 'No More Ransom'.

The police urge people who fall victim to ransomware to first check the No More Ransom platform for whether a decryption tool is already available for the type of malware they've been infected with. "If it isn't there yet, keep an eye on the site. There is a chance that a solution for your variant will be added", the police said.
Click to expand...

FanJ · Aug 18, 2019

mood said: ↑

Dutch cops help over 300 decrypt ransomware
August 15, 2019
https://nltimes.nl/2019/08/15/dutch-cops-help-300-decrypt-ransomware
Click to expand...

PS: here is the original article (in Dutch) by the Dutch Police:
https://www.politie.nl/nieuws/2019/augustus/14/drie-jaar-no-more-ransom.html

guest · Jan 15, 2020

NZ Police signs up to support No More Ransom project
January 16, 2020
https://www.police.govt.nz/news/release/nz-police-signs-support-no-more-ransom-project

NZ Police is excited to announce they have become a supporting partner of the “No More Ransom” project, an initiative which has helped more than 200,000 victims of ransomware recover their files free of charge since being launched in July 2016.

Detective Superintendent Iain Chapman, Acting National Crime Manager, says there is no doubt the No More Ransom project will benefit ransomware victims in New Zealand.

“All victims need to do is upload two encrypted files to the portal. The portal will identify the strain of ransomware involved, and if the appropriate keys or tools are held, it will automatically decrypt the victim’s computer.”
“We know the losses from ransomware are likely to be much higher than those reported to authorities,” says Detective Superintendent Chapman.
“No More Ransom completely disrupts their business model and puts the power back in the hands of the victims.”
Click to expand...

FanJ · Jul 25, 2020

Four years ago the No More Ransom initiative was launched.
As far as I know, there is no Press Release about it. It has been awhile since there was the last Press Release from Europol about the project. Of course the Corona pandemic could also play a role here. Maybe it comes later.

Stay safe!

guest · Jul 27, 2020

No More Ransom turns 4: Saves $632 million in ransomware payments
July 27, 2020
https://www.bleepingcomputer.com/ne...s-4-saves-632-million-in-ransomware-payments/

The No More Ransom Project celebrates its fourth anniversary today after helping over 4.2 million visitors recover from a ransomware infection and saving an estimated $632 million in ransom payments.
Today, The No More Ransom Project includes 163 partners worldwide, including BleepingComputer, who joined the Project in 2018.
An estimated $632 million saved
Over the past four years, The No More Ransom project estimates that they have saved $632 million in ransom payments through its partners' cooperation and the decryptors that were released.

These savings are done through the availability of 110 decryptors created by law enforcement, academia, and private partners that have been downloaded over 4.2 million times.
Click to expand...

The decryptors without telemetry include ones created by Emsisoft, who has released the most amount of tools at 54 decryptors.
Some of the more popular decryptors downloaded from BleepingComputer over the past four years include STOP Ransomware, TeslaCrypt, Jigsaw, and HiddenTear.
Click to expand...

Press Release:
No More Ransom: how 4 millions victims of ransomware have fought back against hackers

FanJ · Jul 27, 2020

mood said: ↑

No More Ransom turns 4: Saves $632 million in ransomware payments
Click to expand...

Thanks mood. Was expecting the Press Release from Europol.

Interesting is again the Infographic by Europol:
https://www.europol.europa.eu/publications-documents/infographic-4th-anniversary-no-more-ransom

FanJ · Aug 3, 2020

I want to make a remark about that recent article from Lawrence at BleepingComputer.
But before I do that, I want to make absolutely clear that I do NOT want to start a political discussion!

My remark is about the starters of the No More Ransom project.

Quote from that article at Bleeping Computer:

No More Ransom was created in 2016 through an alliance between Europol’s European Cybercrime Centre, the National High Tech Crime Unit of the Netherlands’ police, and McAfee to battle ransomware and provide free decryption services and support to victims.
Click to expand...

What it doesn't mention, is that Kaspersky was also a founding member.
There are lots of quotes and articles in the previous posts in this thread, that are mentioning it. You can also see it at the No More Ransom site, here:
https://www.nomoreransom.org/en/about-the-project.html

The “No More Ransom” website is an initiative by the National High Tech Crime Unit of the Netherlands’ police, Europol’s European Cybercrime Centre, Kaspersky and McAfee with the goal to help victims of ransomware retrieve their encrypted data without having to pay the criminals.
Click to expand...

(I'm going to make a screenshot of it for myself)

Let's not rewrite history.

It could very well be that it was a slip of the pen by Lawrence; that can happen to all of us. And make no mistake, I have great respect for Lawrence!
I'll send him a PM here.

Grinler · Jul 27, 2020

Mess up on my part Added em back as per our PM

FanJ · Jul 27, 2020

Grinler said: ↑

Mess up on my part Added em back as per our PM
Click to expand...

Thanks! Keep up the good work

FanJ · Jul 24, 2021

About 5 years ago the NoMoreRansom project was started (Well, actually tomorrow they will turn 5 years).
Let's wait and see whether there will come a Press Release in the coming days by Europol.

guest · Jul 26, 2021

Europol Press Release
Unhacked: 121 tools against ransomware on a single website
In its five years of existence, No More Ransom has helped prevent almost a billion euros from ending up in criminals’ pockets
July 26, 2021
https://www.europol.europa.eu/newsroom/news/unhacked-121-tools-against-ransomware-single-website

Working from home, the beach or a café is a reality for many people today. Everything we need is stored in our digital devices, such as personal computers, laptops and mobile phones, which contain important information about our personal and professional lives. Digitalisation has created a flexible living environment that gives us the freedom to easily access a universe of information.
Locked? Check the No More Ransom website for a key
The decryptors available in the No More Ransom repository have helped more than six million people to recover their files for free. This prevented criminals from earning almost a billion euros through ransomware attacks. Currently offering 121 free tools able to decrypt 151 ransomware families, it unites 170 partners from the public and private sector. The portal is available in 37 languages.
Click to expand...

The best way to stay healthy is not to get sick. That obvious statement also applies to ransomware attacks. Anyone can be a target – individuals and companies of all sizes. So, what can we do?

Regularly back up data stored on your electronic devices.

Watch your clicks – do you know where a link will take you?

Beware of attachments in emails.

Ensure that your security software and operating system are up to date.

If you become a victim, do not pay! Report the crime and check No More Ransom for decryption tools.

Click to expand...

For the full picture: read all the prevention advice on the No More Ransom website.
Click to expand...

FanJ · Jul 26, 2021

Thanks @mood. Was expecting the Press Release.

The Infographic given is (again) interesting. You can see it there at the Press Release. It's also here:
https://www.europol.europa.eu/sites/default/files/images/editor/nmr_-_infographic_2021.jpg

But now this quote from the Press Release:

A new No More Ransom website has been launched to mark the project’s fifth year. Modern and more user-friendly, the new home of the Crypto Sheriff offers updated information on ransomware, as well as advice on how to prevent a ransomware infection.
Click to expand...

I'm not so sure whether that was a wise idea. I cannot see it using IE11 on Win7. Outdated, yes. But think again. Aren't there more people who might need the help from their site and cannot reach it now? Whatever you might think about it, in my humble opinion such a site should be readable with whatever browser a person is using.

FanJ · Nov 8, 2021

Europol Press Release - 08 November 2021
https://www.europol.europa.eu/newsroom/news/five-affiliates-to-sodinokibi/revil-unplugged

This is a cross-posting from https://www.wilderssecurity.com/threads/computer-crimes-and-punishment.394808/page-45#post-3048589

Decrypt with No More Ransom
Click to expand...

The support from the cybersecurity sector has proven crucial for minimising the damage from ransomware attacks, still the biggest cybercrime threat. Many partners have already provided decryption tools for a number of ransomware families via the No More Ransom website. Bitdefender supported this investigation by providing key technical insights throughout the entire investigation, along with decryption tools for both of these highly prolific ransomware families to help victims recover their files. KPN and McAfee Enterprises are other private sector partners that have also supported this investigation, by providing technical expertise to law enforcement.
Click to expand...

Currently, No More Ransom has decryption tools for GandCrab (V1, V4 and V5 up to V5.2 versions) and for Sodinokibi/REvil. The Sodinokibi/REvil decryption tools helped more than 1400 companies decrypt their networks, saving them almost €475 million in potential losses. The tools made available for both ransomware families enabled more than 50 000 decryptions, for which cybercriminals had asked about €520 million in ransom.
Click to expand...

FanJ · Jul 26, 2022

Europol Press Release - 26 July 2022
Six years of public-private partnership
https://www.europol.europa.eu/media...ow-offers-136-free-tools-to-rescue-your-files

Hit by ransomware? No More Ransom now offers 136 free tools to rescue your files

As the initiative turns six, over 10 million people have downloaded the decryption tools
Click to expand...

Celebrating its sixth anniversary today, No More Ransom provides keys to unlocking encrypted files as well as information on how to avoid getting infected in the first place.

Launched by Europol, the Dutch National Police (Politie) and IT security companies, the No More Ransom portal initially offered four tools for unlocking different types of ransomware and was available only in English.
Click to expand...

Six years later, No More Ransom offers 136 free tools for 165 ransomware variants, including Gandcrab, REvil/Sodinokibi, Maze/Egregor/Sekhmet and more. Over 188 partners from the public and private sector have joined the scheme, regularly providing new decryption tools for the latest strains of malicious software.
Click to expand...

To date, the scheme has so far helped over 1.5 million people successfully decrypt their devices without needing to pay the criminals. The portal is available in 37 languages in order to better assist victims of ransomware across the globe.
Click to expand...

FanJ · Jul 26, 2022

About that "IT security companies" in:

Launched by Europol, the Dutch National Police (Politie) and IT security companies
Click to expand...

Those IT security companies were Kaspersky and Intel Security (later again named McAfee). Why not give credits ...

Log in or Sign up

[NoMoreRansom]Law enforcement and IT security companies join forces to fight ransomware

FanJ Updates Team

FanJ Updates Team

FanJ Updates Team

guest Guest

FanJ Updates Team

guest Guest

FanJ Updates Team

guest Guest

FanJ Updates Team

FanJ Updates Team

Grinler Security Expert

FanJ Updates Team

FanJ Updates Team

guest Guest

FanJ Updates Team

FanJ Updates Team

FanJ Updates Team

FanJ Updates Team

Log in or Sign up

[NoMoreRansom]Law enforcement and IT security companies join forces to fight ransomware

FanJ Updates Team

FanJ Updates Team

FanJ Updates Team

guest Guest

FanJ Updates Team

guest Guest

FanJ Updates Team

guest Guest

FanJ Updates Team

FanJ Updates Team

Grinler Security Expert

FanJ Updates Team

FanJ Updates Team

guest Guest

FanJ Updates Team

FanJ Updates Team

FanJ Updates Team

FanJ Updates Team

Useful Searches