Researchers took advantage of a weakness in the encryption scheme of Key Group ransomware and developed a decryption tool that lets some victims to recover their files for free.
Direct link to report which has the decryptor written in Python:
I’m not clear on the specifics but I’ve FWD’d this to someone I know in this exact scenario currently. Unsure if it’s the same Russian group, or if this is “breaking news” or not (aka if friends have already seen this decrypt solution before this article posted today), but this could make a huge difference to someone out there, even if not them. Thanks for posting.
If anyone had the unfortunate experience needing to use this, please let me know how quick the script is. It looks fairly slow.
You could re-implement this mult-threaded etc if you liked
I’m not clear on the specifics but I’ve FWD’d this to someone I know in this exact scenario currently. Unsure if it’s the same Russian group, or if this is “breaking news” or not (aka if friends have already seen this decrypt solution before this article posted today), but this could make a huge difference to someone out there, even if not them. Thanks for posting.