June 18, 2019 By David Bisson < 1 min read

An updated decryption tool enables victims of GandCrab ransomware version 5.2 and below to recover their affected files for free.

Bitdefender announced that users can download the decryption tool by visiting the No More Ransom Project, an initiative that seeks to connect crypto-ransomware victims with free decryptors. This utility arrived just a few weeks after the creators of GandCrab announced their retirement. As part of that transition, the malware authors vowed to delete all of the outstanding decryption keys, preventing victims from paying the ransom to recover their files going forward.

As reported by ZDNet, the individuals behind GandCrab said they’re retiring because they’ve “proven that by doing evil deeds, retribution does not come.” They said they made a total of $2 billion from their ransomware campaigns overall, having generated about $2.5 million every week from ransom payments alone.

Decryption Tool Puts a Dent in GandCrab’s Profits

According to Bitdefender, GandCrab’s authors likely exaggerated those numbers. The security firm noted that its GandCrab decryption tool, of which it had released three prior versions, had thwarted 30,000 successful infections and saved victims a total of $50 million at the time of this writing.

GandCrab is only the latest ransomware family for which security researchers have developed decryption tools. In May, Emsisoft released a decryptor for JSWorm 2.0. This was just a few weeks before the French Ministry of Interior unveiled a similar utility for PyLocky versions 1 and 2.

Mount a Layered Ransomware Defense

Beyond decryption tools, security teams can help defend their organizations against ransomware by integrating data backups, anti-malware solutions and other tools into a holistic, layered defense strategy. Security awareness training is also crucial to educate employees about common social engineering techniques attackers use to distribute ransomware and other threats.

More from

AI decision-making: Where do businesses draw the line?

4 min read - "A computer can never be held accountable, therefore a computer must never make a management decision."- IBM Training Manual, 1979Artificial intelligence (AI) adoption is on the rise. According to the IBM Global AI Adoption Index 2023, 42% of enterprises have actively deployed AI, and 40% are experimenting with the technology. Of those using or exploring AI, 59% have accelerated their investments and rollouts over the past two years. The result is an uptick in AI decision-making that leverages intelligent tools…

When ransomware kills: Attacks on healthcare facilities

4 min read - As ransomware attacks continue to escalate, their toll is often measured in data loss and financial strain. But what about the loss of human life? Nowhere is the ransomware threat more acute than in the healthcare sector, where patients’ lives are literally on the line.Since 2015, there has been a staggering increase in ransomware attacks on healthcare facilities. And the impacts are severe: Diverted emergency services, delayed critical treatments and even fatalities. Meanwhile, the pledge some ransomware groups made during…

AI and cloud vulnerabilities aren’t the only threats facing CISOs today

6 min read - With cloud infrastructure and, more recently, artificial intelligence (AI) systems becoming prime targets for attackers, security leaders are laser-focused on defending these high-profile areas. They’re right to do so, too, as cyber criminals turn to new and emerging technologies to launch and scale ever more sophisticated attacks.However, this heightened attention to emerging threats makes it easy to overlook traditional attack vectors, such as human-driven social engineering and vulnerabilities in physical security.As adversaries exploit an ever-wider range of potential entry points…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today