Security-X
Forum Security-X => Sécurité Générale => Malwares => Discussion démarrée par: chantal11 le mai 25, 2016, 16:18:08
-
Bonjour,
Une fiche BleepingComputer sur cette nouvelle variante du ransomware CryptXXX
CryptXXX updated to version 3.0, Decryptors no longer Work (http://www.bleepingcomputer.com/news/security/cryptxxx-updated-to-version-3-0-decryptors-no-longer-work/)
On May 21st, the developers behind the CryptXXX ransomware updated their code to version 3.0 in order to stop Kaspersky's RannohDecryptor from decrypting files for free. Unfortunately, it appears that this update has also had the unintended consequence of breaking the malware developers decryptor.
Since CryptXXX has been released, it has been plagued with bugs and weaknesses that has allowed Kaspersky to decrypt victim's files for free. Now that the malware devs updated to version 3.0 in order to stop Kaspersky, based on multiple reports of people who paid the ransom, it also looks like the malware developers broke their own decryptor.
Update 5/25/16:
The malware developer's ears must have been ringing, because they release a new decryptor for the 3.x version of CryptXXX. A visitor (or insider), posted a comment in this article stating that the "hackers updated the decryption application".