ClickCease Bitdefender releases decryptor for MegaCortex ransomware

Join Our Popular Newsletter

Join 4,500+ Linux & Open Source Professionals!

2x a month. No spam.

Bitdefender releases decryptor for MegaCortex ransomware

Obanla Opeyemi

January 20, 2023 - TuxCare expert team

Bitdefender experts have created a universal decryptor for victims of the MegaCortex ransomware family.

MegaCortex has been in use since at least January 2019, and some of the actors who have used it have also been linked to the older Dharma and LockerGoga ransomware variants. The MegaCortex ransomware was occasionally associated with infections by the Qakbot and Emotet malware families and was typically used in corporate network intrusions.

The decryptor was created in collaboration with Swiss and European law enforcement agencies, who conducted raids in October 2021 on the alleged cybercriminals behind the Dharma, MegaCortex, and LockerGoga ransomware strains.

The decryptor is a stand-alone executable that does not require installation and can automatically identify encrypted files on the system. It will decrypt files encrypted by all MegaCortex ransomware variants. It can be downloaded from Bitdefender as well as No More Ransom’s decryption tools portal, which contains 136 free tools for 165 ransomware variants such as Babuk, DarkSide, Gandcrab, and REvil.

The decryptor can also back up the encrypted files for safety in case something goes wrong in the decryption process that could corrupt the files beyond recovery. It also offers an advanced setting to replace undecrytped files with clean files.

Some MegaCortex ransomware attacks have reportedly targeted critical infrastructure and other high-profile targets, with attackers gaining network access through a variety of means, including purchasing access to systems compromised with trojan malware or stealing usernames and passwords.

Authorities from the United States, Switzerland, Ukraine, and other countries disrupted the operation of the MegaCortex ransomware infrastructure in October 2021, arresting 12 people in connection with its deployment. This operation also caused problems with Dharma and LockerGoga.

Despite this, MegaCortex infections have not completely vanished, and BitDefender security researchers have developed a universal decryptor that victims can use to recover encrypted files without paying a ransom. The decryptor was made available as part of the collaborative No More Ransom project run by Europol, the Dutch National Police’s National High Tech Crime Unit, and a number of security firms.

The sources for this piece include an article in BleepingComputer.

Summary
Bitdefender releases decryptor for MegaCortex ransomware
Article Name
Bitdefender releases decryptor for MegaCortex ransomware
Description
Bitdefender experts have created a universal decryptor for victims of the MegaCortex ransomware, linked to the older ransomware variants.
Author
Publisher Name
TuxCare
Publisher Logo

Looking to automate vulnerability patching without kernel reboots, system downtime, or scheduled maintenance windows?

Learn About Live Patching with TuxCare

Related Articles

How GPT models can be...

According to CyberArk researchers, GPT-based models like ChatGPT can be...

January 30, 2023

Attackers actively exploit Unpatched Control...

Malicious hackers have started exploiting a critical vulnerability CVE-2022-44877 in...

January 27, 2023

Attackers distribute malware via malicious...

Deep Instinct researchers reported that RATs like StrRAT and Ratty...

January 26, 2023

CircleCI partners AWS to identify...

According to CircleCI’s CTO, Rob Zuber, CircleCI is working with...

January 25, 2023

Cisco warns of authentication bypass...

A remote attacker could exploit multiple vulnerabilities in four Cisco...

January 24, 2023

IceID malware infiltrates Active Directory...

In a notable IcedID malware attack, the assailant impacted the...

January 23, 2023