Researchers released a decryptor for the FunkSec ransomware
ID: bc07b897-f6d0-5d43-b449-8941b8bab9fa
STIX ID: report--bc07b897-f6d0-5d43-b449-8941b8bab9fa
Feed Name: Security Affairs
Threat Score
Researchers released a decryptor for the FunkSec ransomware after coordination with law enforcement, enabling victims to recover files; the report details FunkSec’s timeline (active Dec 2024–Mar 2025), Rust-based samples, AI-assisted development, RaaS operations with a leak site listing 113 victims, techniques such as disabling Windows defenses and appending a .funksec extension, and notes that the group appears low-skilled and is now considered defunct.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.