Czech cybersecurity software firm Avast has created and released a decryption tool to help Babuk ransomware victims recover their files for free
According to
Avast Threat Labs, the Babuk decryptor was created using leaked source code and decryption keys.
The free decryptor can be used by Babuk victims who had their files encrypted using the following extensions: .babuk, .babyk, .doydo.
Babuk ransomware victims can
download the decryption tool from Avast's servers and decrypt entire partitions at once using instructions displayed within the decryptor's user interface.
From BleepingComputer's tests, this decryptor will likely work only for victims whose keys were leaked as part of the Babuk source code dump.
