Free Decryptor Tool Released for the Black Basta Ransomware
ID: 42640588-e3e7-503e-ab8f-0d255e93a1ce
STIX ID: report--42640588-e3e7-503e-ab8f-0d255e93a1ce
Feed Name: GBHackers
SRLabs published a free decryptor for Black Basta ransomware after discovering a weakness in the malware's encryption scheme that allows file recovery when 64 bytes of plaintext are known; files under 5,000 bytes cannot be restored, files between 5,000 bytes and 1 GB can be fully recovered, and files larger than 1 GB will lose the first 5,000 bytes but have the remainder recoverable. The report notes the gang's double-extortion tactics, over 329 victims and around $107 million in ransom payments, and highlights that virtual disk images have a high chance of recovery using the tool and standard disk-repair utilities.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
