Emsisoft released a free decryption tool for Paradise ransomware

DDE_Server

Level 22
Thread author
Verified
Top Poster
Well-known
Sep 5, 2017
1,168
Researchers at Emsisoft firm has released a new free tool to decrypt files encrypted by the Paradise ransomware

Security experts at Emsisoft have developed a tool to decrypt files encrypted by the Paradise ransomware.
This ransomware family encrypts files using Salsa20 and RSA-1024 and it appends several extensions to theis filenames.
“The Paradise ransomware encrypts victims using Salsa20 and RSA-1024, and appends one of several extensions such as “.paradise”, “2ksys19”, “.p3rf0rm4”, and “.FC”.” reads the post published by Emsisoft.
Below an example of a ransom note shared by the experts at Emsisoft.
Filename = “—==%$$$OPEN_ME_UP$$$==—.txt”
Code:
WHAT HAPPENED!
Your important files produced on this computer have been encrypted due a security problem.
If you want to restore then write to the online chat.

Contact!
Online chat: Chat
Your operator: Support
Your personal ID: [redacted]

Enter your ID and e-mail in the chat that you would immediately answered.

Attention!
Do not rename encrypted files.
Do not try to decrypt your data using third party software, it may cause permanent data loss.
Do not attempt to use the antivirus or uninstall the program.
This will lead to your data loss and unrecoverable.
Decoders of other users is not suitable to decrypt your files - encryption key is unique.
The decryptor for the ransomware is available at the following URL:
https://www.emsisoft.com/ransomware-decryption-tools/download/paradise


Read more: Emsisoft released a free decryption tool for Paradise ransomware
 
Last edited by a moderator:

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top