Tuesday, March 4, 2025
HomeRansomwareKaspersky's RannohDecryptor adds more power - Ransomware battle

Kaspersky’s RannohDecryptor adds more power – Ransomware battle

Published on

SIEM as a Service

Follow Us on Google News

Kaspersky’s RannohDecryptor adds more power – Ransomware battle:

Since April 2016, Kaspersky Lab has recorded attacks by CryptXXX against at least 80,000 users around the world.

More than half of them located in only six countries: the US, Russia, Germany, Japan, India, and Canada.

As indicated by Kaspersky Lab, CryptXXX is a standout among the most effectively scatter and risky groups of ransomware: for a while attackers used the Angler and Neutrino abuse packs to infect users with this malware.

Kaspersky’s RannohDecryptor adds more power – Ransomware battle

Kaspersky's RannohDecryptor adds more power - Ransomware battle

Security experts from Kaspersky, have figured out how to discover a cure for the third form of CryptXXX trojan.so the .cryp1, .sepulcher and .crypz records can be decoded at the end of the day.

Then Kaspersky added the decryption to the Rannoh Decryptor utility, which you can discover either at Kaspersky or nomoreransom.

Nomoreransom is the site of the not revenue driven activity propelled for the current year by the National High Tech Crime Unit of the Netherlands’ police, Europol’s European Cybercrime Center and two digital security organizations, Kaspersky Lab and Intel Security, with the aim of helping casualties of ransomware to recover their scrambled information without paying the criminals.

Kaspersky’s advice to the victims of different ransomware families is the following: even if there is currently no decryption tool available for the version of malware that encrypted your files, please don’t pay the ransom to criminals. Save the corrupt files and be patient — the probability of a decryption tool emerging in the near future is high.

If you are infected with CryptXX – visit one of the before mentioned sites, download the utility and recover your records.

Nomoreransom utilities are free and can help you recover records scrambled by most forms of the trojan, so you would spare a pleasant total by not paying the payment to the culprits.

General Methods to prevent Ransomware

1.Backup data.
2.Disable files running from AppData/LocalAppData folders.
3.Filter EXEs in the email.
4.Patch or Update your software.
5.Use the Cryptolocker Prevention Kit.
6.Use a reputable security suite.
7.CIA cycle(Confidentiality, integrity, and availability)
8.Utilize System Restore to recover the computer.
9.Disconnect Internet connection immediately.

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Bubba AI, Inc. is Launching Comp AI to Help 100,000 Startups Get SOC 2 Compliant by 2032.

With the growing importance of security compliance for startups, more companies are seeking to...

IBM Storage Virtualize Flaws Allow Remote Code Execution

Two critical security flaws in IBM Storage Virtualize products could enable attackers to bypass...

Progress WhatsUp Gold Path Traversal Vulnerability Exposes Systems to Remote code Execution

A newly disclosed path traversal vulnerability (CVE-2024-4885) in Progress Software’s WhatsUp Gold network monitoring...

CISA Alerts on Active Exploitation of Cisco Small Business Router Flaw

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an urgent warning on March...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

DragonForce Attacks Critical Infrastructure to Exfiltrate Data and Halt Operations

The DragonForce ransomware group has launched a significant cyberattack on critical infrastructure in Saudi...

New Anubis Ransomware Targets Windows, Linux, NAS, and ESXi x64/x32 Environments

A new ransomware group, dubbed Anubis, has emerged as a significant threat in the...

LARVA-208 Hackers Compromise 618 Organizations Stealing Logins and Deploying Ransomware

A newly identified cybercriminal group, LARVA-208, also known as EncryptHub, has successfully infiltrated 618...