News Fonix Ransomware Operators Stop Their Cybercrime Activity


Jaysu

Banned
Joined
21.09.20
Messages
121
Reaction score
758
Points
63
In another publication, a representative of the group shared a link to the RAR archive with the name "Fonix_decrypter.rar", containing both the decryptor and the decryption master private key.

The decryptor is an administrator tool used within the ransomware group. Sometimes ransomware allows victims to send several encrypted files, which they will decrypt for free, to prove the veracity of their intentions after paying a ransom. The decryptor is a tool of the Fonix operators to perform this free test decryption and does not allow the victim to recover all the files on the system. Even though it can only decrypt one file at a time, the test results showed that it has very confusing instructions and is prone to crashes.

The good news is that decryption keys work, but only with some versions of the Fonix ransomware.
 
Top Bottom