thyrex

For .MEOW only for files encrypted later October, 2022

Contistolen Ransomware with extensions .RUSSIA, .PUTIN, .KREMLIN and .MEOW is free decrypted now after leaking of keys

@PakeTariko Are you sure that have files encrypted with one of those versions?

@thyrex2002 How can we decrypt? Thanks in advance

Some versions of CryLock 1.8.0.0, 1.9.2.1, 2.0.0.0 can be decrypted now (at least for Russian-speaking users)

Decrypted emails for version 2.0.0.0 are: hopeandhonest@smime.ninja paybackformistake@qq.com fairexchange@qq.com LoganParker@techmail.info 259461356@qq.com snowden@onionmail.org honestandhope@qq.com luisgreen@onionmail.org

Decrypted emails for version 1.9.2.1 are: reddragon000@protonmail.ch omegawatch@protonmail.com fairexchange@qq.com

A new #Kanalia #Ransomware in my Digest. id-ransomware.blogspot.com/2022/06/kanali… Extension: XJJ Spreading against Russian-speaking users along with a docx file. Forces to open a second malicious file for execute a primitive encoder. No ransom note found. Decryptable. Thank Thyrex, Sandor.

cc @BleepinComputer @malwrhunterteam @demonslay335

@Josip76317954 upload sample of encrypted files on dropmefiles.com and send downloading link

Decrypter for CryLock (ex-Cryakl) 1.9.0.0 available now. Victims may contact me for free decryption.

@infernal32 Здравствуйте. Расшифровки для версии 2.0.0.0 нет

@thyrex2002 Здравствуйте, компьютер подвергся атаке и были зашифрованы файлы, прилагаю ссылку на файл зашифрованный dropmefiles.com/PHGgj есть возможность разблокировки?

@MohammadAhsun Upload sample of encrypted file on dropmefiles.com and send downloading link

@thyrex2002 How can i know is it 1.9 or 2.0?

@MohammadAhsun Hi. Only with version 1.9.0.0

@thyrex2002 Hi Alex. Can you please share decryptor tool for Crylock? Will it decrypt the files?

@Amigo_A_ @fbgwls245 @BleepinComputer @demonslay335 @siri_urz @malwrhunterteam @JAMESWT_MHT @JakubKroustek Это не CryLock

#CrySis/#Dharma #Ransomware 1935185051C225C096396BFFBD7B5A34 New ext: .id-XXXXXXXX.[bad_dev@tuta.io].bdev Note: Pop-Window / info.txt @BleepinComputer @demonslay335 @Amigo_A_ @siri_urz @malwrhunterteam @JAMESWT_MHT @JakubKroustek

@Evo29627959 Upload sample of encrypted file on dropmefiles.com and send downloading link

@Evo29627959 with version 1.9.0.0 only

From FRST.txt after Fonix Ransomware 😄

@VaTgPYNe4mgcCzZ Расшифровки этой версии нет

@thyrex2002 Добрый день! Можете пожалуйста прислать, то что у Вас есть про этот шифровальщик... мы тоже поймали его.

#CryLock #Ransomware version 2.0.0.0 was released. Many changes in encoder code.

@bellamiye I'm not sure that you have version 1.9.0.0. I need sample of your encrypted file

@thyrex2002 Would you please help me? I need the tool. ,😓

#WannaCash 2.0 #Ransomware (version v170720 and v010820) decryptable now.