Avaddon ransomware shuts down and releases decryption keys

The_King

Level 12
Thread author
Verified
Top Poster
Well-known
Aug 2, 2020
542
The Avaddon ransomware gang has shut down operation and released the decryption keys for their victims to BleepingComputer.com.

This morning, BleepingComputer received an anonymous tip pretending to be from the FBI that contained a password and a link to a password-protected ZIP file.

This file claimed to be the "Decryption Keys Ransomware Avaddon," and contained the three files shown below.
zip-folder.jpg

After sharing the files with Fabian Wosar of Emsisoft and Michael Gillespie of Coveware, they confirmed that the keys are legitimate.

Using a test decryptor shared with BleepingComputer by Emsisoft, I decrypted a virtual machine encrypted today with a recent sample of Avaddon.
decryption-test.gif

 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top