New Site Recovers Files Locked by Cryptolocker Ransomware
Summary: Two security firms, FireEye and Fox-IT, launched decryptcryptolocker.com, a free service that lets CryptoLocker victims upload one encrypted file and an email address to receive a decryption program for all their locked files. The service was possible because Fox-IT recovered the private keys the criminals used on their own paid decryption service, an opportunity that arose as the crooks tried to rebuild infrastructure after Operation Tovar, the June effort that took over the GameOver Zeus botnet, estimated to have infected 500,000 to 1 million PCs.
Key Takeaway: Fox-IT reports only 1.3% of CryptoLocker victims paid the ransom, meaning a large share likely lost their files permanently - and at its October 2013 peak the malware hit over 155,000 systems in a single month, still pacing around 50,000 infections monthly afterward.
Read the original at Krebs on Security ↗
- Topics
- Ransomware
- Related
- How To Avoid Crypto Locker Ransomware Cyber Risks ·Talk Talk Hackers Demanded £80K in Bitcoin Cyber Risks ·Ransomware Getting More Targeted, Expensive Cyber Risks ·