ElevenPaths Decrypts Ransomware Data

ElevenPaths Decrypts Ransomware Data 1024 500 Crypto Rand Group
ElevenPaths ransomware

Ransomware (ransom software) took cryptomoney from the victims in exchange for access to the data concerned, ElevenPaths is launching a tool to decrypt it.

In a major effort to help victims of the Ransomware VCryptor attack, Spanish telecommunications company Telefónica announced yesterday that its cybersecurity department has developed a tool to recover data encrypted by VCryptor. The free decryption tool was developed and launched as part of the international “No more Ransomware” initiative to prevent ransom software.

According to ElevenPaths, Telefónica’s Cyber Security Department, the VCryptor ransomware targeted the victims’ data, which was then stored in a password-protected ZIP file. New files with the extension were generated to replace the original files. The ransomware then displayed a message to inform the victims of their attack.

The victims were forced to pay a ransom to the attackers using crypto-currency to recover access to their encrypted files. It was reported that Bitcoin was the most popular payment choice for hackers. Victims could also be asked to infect their contacts in exchange for their data instead of paying.

Telefónica’s free tool takes advantage of a weakness found in the ransomware’s password encryption method. ElevenPaths stated that this weakness was actually found in the pathogen’s own code. Ransomware does not use the usual pattern of different keys to decrypt and encrypt files.

The key, in this case, was present in the malware that was discovered and used by ElevenPaths to create the free tool.

The tool can be found on the website of No More Ransomware, an initiative of antivirus software companies such as McAfee, Europol, Politie and Kaspersky. The decryptor is available free of charge to victims of attacks, and can help recover data locked by the ransom software. Telefónica’s cyber security division, ElevenPaths, has also been involved in the creation of free tools to help decrypt files affected by the PopCorn ransom software in the past.

The No More Ransomware initiative is the result of an alliance between McAfee, Europol, Politie and Kaspersky. It was created to provide a platform that offers solutions to malware. Earlier this year, Interpol and the cyber security company Kaspersky came together to declare May 12 as the day against malware.

The aim of the day was to raise awareness and support the fight against ransom software attacks worldwide. “These cyber threats cause serious harm to individuals and organizations, exacerbating an already dire situation in the physical world. The time has come to unite to stop them,” said Craig Jones, Interpol’s Director of Cybercrime, at the announcement.

Want to stay updated on a daily basis?

Join us on Discord

Click here to go back to the news section