Europol-Interpol Cybercrime Conference sees No More Ransom anti-ransomware initiative highlighted as successful example of law enforcement agencies’ collaboration.ĭespite the release of the tool, Europol said the best cure against ransomware remains diligent prevention.McAfee has released a decryption framework to boost the production of decryption tools to help victims of ransomware attacks.The Belgian police have released free decryption keys for the Cryakl ransomware through the No More Ransom project.
The latest decryption tool targets the latest versions of the ransomware and follows decryption tools made available for earlier versions of GandCab that have been downloaded more than 400,000 times and are estimated to have helped about 10,000 victims retrieve their encrypted files, saving around $5m in ransomware payments. Recently, GandCrab operators have also started to deliver ransomware to companies via vulnerabilities in remote IT support software used by managed service providers to manage customer workstations. Once the network is infected, the attackers wipe their traces clean and contact the victim with a decryption offer. Last year, some GandCrab affiliates began attacking organisations via exposed remote desktop protocol (RDP) instances, or by directly logging in with stolen domain credentials.Īfter authenticating on a compromised PC, attackers typically run the ransomware manually and instruct it to spread across the entire network. The ransomware is a favourite among cyber criminals and is believed to have helped them extort hundreds of millions of dollars in ransom payments in the past few months alone by targeting individuals as well as businesses. GandCrab is one of the world’s most prolific families of ransomware to date and has surpassed all other strains of ransomware, having infected more than 500,000 victims since it was detected in January 2018. The latest decryption tool was developed by the Romanian police in close collaboration with internet security company Bitdefender and Europol, with support from law enforcement authorities in Austria, Belgium, Cyprus, France, Germany, Italy, the Netherlands, the UK and Canada, as well as the FBI in the US. The No More Ransom website is an initiative by the National High Tech Crime Unit of the Netherlands’ police, Europol’s European Cybercrime Centre, McAfee and a growing list of security industry partners that aims to help victims of ransomware retrieve their encrypted data.
0 kommentar(er)
