Avast releases free decryptor for DoNex ransomware and past variants

Avast discovered a cryptographic weakness in the DoNex ransomware family (formerly DarkRace/Muse) and has released a decryptor that can recover files from all past DoNex variants; the report details DoNex's encryption method (ChaCha20 key generation via CryptGenRandom and RSA-4096-wrapped keys), affected geographies, and guidance for using the decryptor (requires admin privileges and a matching encrypted/original file pair).