And that's a wrap for Babuk Tortilla ransomware as free decryptor released

**Executive summary:** Security researchers (Cisco Talos and Avast) and Dutch authorities obtained an updated decryptor for the Babuk 'Tortilla' ransomware variant after the arrest of an operator; because the variant reused a single private key across victims, the decryptor can recover files for all Tortilla victims and is being distributed via Avast and the No More Ransom project. The report also notes Tortilla's technical characteristics (AES-256 + ChaCha8, Monero payments), its initial ProxyShell targeting and unpacking chain hosted on a pastebin clone, and that the decryptor was extracted and optimized rather than releasing untrusted code.