Bleeping Computer

New ransomware decryptor recovers data from partially encrypted files

A new 'White Phoenix' ransomware decryptor allows victims to partially recover files encrypted by ransomware strains that use intermittent encryption. Intermittent encryption is a strategy employed by ...
InfoWorld

Free tool may decrypt files encrypted by CoinVault ransomware

Victims of the CoinVault ransomware might be able to decrypt their files with a free tool released by Kaspersky Lab together with the Dutch police. The tool can be found at ...
Bleeping Computer

New Black Basta decryptor exploits ransomware flaw to recover files

Researchers have created a decryptor that exploits a flaw in Black Basta ransomware, allowing victims to recover their files for free. The decryptor allows Black Basta victims from November 2022 to ...
Ars Technica

Does ransomware (encryption) damage a file the moment it's touched?

Couldn't figure out a better forum for this. Hopefully soon I'll have some money to buy a low-end NAS that I can use for backups which I can make a little safer than a connected USB drive, in terms of ...
Dark Reading

Flaw in Hacktivist Ransomware Lets Victims Decrypt Own Files

A ransomware variant favored by a pro-Russia hacktivist group is back on the scene with a new version that has a fatal flaw — it keeps artifacts that allow victims to decrypt their files. VolkLocker ...
Infosecurity-magazine.com

FunkSec Ransomware Victims Can Now Recover Files with Free Decryptor

A decryptor for the FunkSec ransomware has been developed and made avaliable to download for free by researchers at antivirus provider Avast. Ladislav Zezul, a malware researcher at Avast’s parent ...

Why encrypted backups may fail in an AI-driven ransomware era

Why encrypted backups may fail in an AI-driven ransomware era ...

New Research from Index Engines™ Shows Ransomware Continues Shift Towards Polymorphism, Shadow Encryption, and Wiper-Style Attacks

Index Engines, the leader in cyber resilience, today shared the latest ransomware trends from its CyberSense® Research Lab, ...
ExtremeTech

New encryption ransomware holds entire websites hostage

Share on Facebook (opens in a new window) Share on X (opens in a new window) Share on Reddit (opens in a new window) Share on Hacker News (opens in a new window) Share on Flipboard (opens in a new ...
Security Boulevard

Emulating the Systematic LokiLocker Ransomware

AttackIQ has released a new attack graph that emulates the behaviors of LokiLocker ransomware, a .NET based strain active since at least mid-August 2021. The malware combines defense evasion and ...
Security Boulevard

Emulating the Mutative BlackByte Ransomware

AttackIQ has released a new attack graph that emulates the behaviors exhibited by BlackByte ransomware, a strain operated ...
TechRepublic

VMware ESXi Servers Targeted by New Ransomware Variant from Cicada3301 Group

VMware ESXi Servers Targeted by New Ransomware Variant from Cicada3301 Group Your email has been sent How the ransomware works Cyber attackers impersonating real organisation Cicada3310 could be a ...