{"id":31655,"date":"2019-06-06T03:50:35","date_gmt":"2019-06-06T07:50:35","guid":{"rendered":"http:\/\/blog.cybercon1.com\/?p=31655"},"modified":"2019-06-06T03:50:35","modified_gmt":"2019-06-06T07:50:35","slug":"smacking-em-down-with-decryptors","status":"publish","type":"post","link":"https:\/\/blog.cyberconservices.com\/index.php\/2019\/06\/06\/smacking-em-down-with-decryptors\/","title":{"rendered":"Smacking ‘Em Down With Decryptors"},"content":{"rendered":"\n

By Lawrence Abrams<\/a> – This was not a very busy week, with mostly new variants of STOP Djvu and Dharma being released.<\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

The bad news is that the RIG exploit kit was discovered distributing the GetCrypt Ransomware through PopCash malvertising campaigns. The good news is that Emsisoft was quickly able to come up with a decryptor for that ransomware<\/strong> and also released a decryptor for JSWorm 2.0.<\/p>\n\n\n\n

Contributors and those who provided new ransomware information and stories this week include:\u00a0@malwareforme<\/a>,\u00a0@BleepinComputer<\/a>,\u00a0@PolarToffee<\/a>,\u00a0@fwosar<\/a>,\u00a0@jorntvdw<\/a>,\u00a0@demonslay335<\/a>,\u00a0@hexwaxwing<\/a>,\u00a0@LawrenceAbrams<\/a>,\u00a0@FourOctets<\/a>,\u00a0@struppigel<\/a>,\u00a0@DanielGallagher<\/a>,\u00a0@malwrhunterteam<\/a>,\u00a0@Seifreed<\/a>,\u00a0@nao_sec<\/a>,\u00a0@VK_Intel<\/a>,\u00a0@Emsisoft<\/a>,\u00a0@NirajC<\/a>,\u00a0@WDRBNews<\/a>,\u00a0@x42x5a<\/a>,\u00a0@GrujaRS<\/a>,\u00a0@bartblaze<\/a>, and\u00a0@HONKONE_K<\/a>.
<\/a><\/p>\n\n\n\n

<\/p>\n\n\n\n

Read more: <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

By Lawrence Abrams – This was not a very busy week, with mostly new variants of STOP Djvu and Dharma being released. The bad news is that the RIG exploit kit was discovered distributing the GetCrypt Ransomware through PopCash malvertising …<\/span> Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false,"jetpack_seo_schema_type":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[636],"tags":[637],"class_list":["post-31655","post","type-post","status-publish","format-standard","hentry","category-ransomware","tag-ransomware"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack-related-posts":[{"id":76218,"url":"https:\/\/blog.cyberconservices.com\/index.php\/2023\/02\/27\/76218\/","url_meta":{"origin":31655,"position":0},"title":"An Overview of the Global Impact of Ransomware Attacks","author":"Rick Backus","date":"February 27, 2023","format":false,"excerpt":"On December 12th, 2022, there was a\u00a0cyberattack\u00a0in the Swedish municipalities of Borgholm and M\u00f6rbyl\u00e5nga that rendered a range of critical services from both municipalities unavailable. Although the nature of the intrusion is still undisclosed, it seems to be part of a wider trend of global ransomware attacks. On January 10th,\u2026","rel":"","context":"In "Ransomware"","block_context":{"text":"Ransomware","link":"https:\/\/blog.cyberconservices.com\/index.php\/category\/ransomware\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/blog.cyberconservices.com\/wp-content\/uploads\/2023\/03\/viking-4898879_1920-1536x1152-1-1.jpg?fit=1200%2C900&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/blog.cyberconservices.com\/wp-content\/uploads\/2023\/03\/viking-4898879_1920-1536x1152-1-1.jpg?fit=1200%2C900&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/blog.cyberconservices.com\/wp-content\/uploads\/2023\/03\/viking-4898879_1920-1536x1152-1-1.jpg?fit=1200%2C900&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/blog.cyberconservices.com\/wp-content\/uploads\/2023\/03\/viking-4898879_1920-1536x1152-1-1.jpg?fit=1200%2C900&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/blog.cyberconservices.com\/wp-content\/uploads\/2023\/03\/viking-4898879_1920-1536x1152-1-1.jpg?fit=1200%2C900&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":44499,"url":"https:\/\/blog.cyberconservices.com\/index.php\/2021\/02\/08\/ransomware-a-company-paid-millions-to-get-their-data-back-but-forgot-to-do-one-thing\/","url_meta":{"origin":31655,"position":1},"title":"Ransomware: A company paid millions to get their data back, but forgot to do one thing","author":"Rick Backus","date":"February 8, 2021","format":false,"excerpt":"A cautionary tale. All I can say is WOW! Fool me once, shame on you. Fool me twice... By\u00a0Danny Palmer - A company that fell victim to a ransomware attack and paid cyber criminals millions for the decryption key to restore their network fell victim to the exact same ransomware\u2026","rel":"","context":"In "Ransomware"","block_context":{"text":"Ransomware","link":"https:\/\/blog.cyberconservices.com\/index.php\/category\/ransomware\/"},"img":{"alt_text":"","src":"https:\/\/media.istockphoto.com\/photos\/regrets-wrong-doing-man-having-a-duh-moment-picture-id491921724?b=1&k=6&m=491921724&s=170667a&w=0&h=I5De0p4UMAgafYRYkvpL505Sdi--5RfLEwFRpadL5FI=","width":350,"height":200,"srcset":"https:\/\/media.istockphoto.com\/photos\/regrets-wrong-doing-man-having-a-duh-moment-picture-id491921724?b=1&k=6&m=491921724&s=170667a&w=0&h=I5De0p4UMAgafYRYkvpL505Sdi--5RfLEwFRpadL5FI= 1x, https:\/\/media.istockphoto.com\/photos\/regrets-wrong-doing-man-having-a-duh-moment-picture-id491921724?b=1&k=6&m=491921724&s=170667a&w=0&h=I5De0p4UMAgafYRYkvpL505Sdi--5RfLEwFRpadL5FI= 1.5x"},"classes":[]},{"id":31457,"url":"https:\/\/blog.cyberconservices.com\/index.php\/2019\/03\/22\/avast-and-emsisoft-release-free-decrypters-for-bigbobross-ransomware\/","url_meta":{"origin":31655,"position":2},"title":"Avast and Emsisoft release free decrypters for BigBobRoss ransomware","author":"Rick Backus","date":"March 22, 2019","format":false,"excerpt":"By\u00a0Catalin Cimpanu\u00a0- Avast and Emsisoft, two cyber-security firms known for their antivirus products, released today free decrypters that can help victims of the BigBobRoss ransomware recover their files without paying the ransom demand. The two decrypters are available for download from the\u00a0Avast\u00a0and\u00a0Emsisoft\u00a0sites, respectively. The ransomware is one of the smaller\u2026","rel":"","context":"In "Ransomware"","block_context":{"text":"Ransomware","link":"https:\/\/blog.cyberconservices.com\/index.php\/category\/ransomware\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.cyberconservices.com\/wp-content\/uploads\/2019\/03\/bigbobross-ransom-note.png?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":31830,"url":"https:\/\/blog.cyberconservices.com\/index.php\/2019\/08\/23\/the-week-in-ransomware-august-9th-2019-summer-doldrums\/","url_meta":{"origin":31655,"position":3},"title":"The Week in Ransomware – August 9th 2019 – Summer Doldrums","author":"Rick Backus","date":"August 23, 2019","format":false,"excerpt":"By\u00a0Lawrence Abrams - As we creep towards the end of the summer, things have started to thankfully slow down a bit. While there are still plenty of ransomware attacks going around, the amount we had seen last month against schools, companies, and government agencies has definitely decreased. The biggest news\u2026","rel":"","context":"In "Ransomware"","block_context":{"text":"Ransomware","link":"https:\/\/blog.cyberconservices.com\/index.php\/category\/ransomware\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.cyberconservices.com\/wp-content\/uploads\/2019\/08\/hacker-4031973__340.jpg?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":49819,"url":"https:\/\/blog.cyberconservices.com\/index.php\/2022\/09\/13\/feds-anticipate-ransomware-attacks-against-schools-could-increase-as-new-year-begins\/","url_meta":{"origin":31655,"position":4},"title":"Feds anticipate ransomware attacks against schools could increase as new year begins","author":"Rick Backus","date":"September 13, 2022","format":false,"excerpt":"The FBI and the Cybersecurity and Infrastructure Security Agency (CISA) said in a new warning they anticipate ransomware attacks could increase as the new school year begins. \"The FBI, CISA, and the MS-ISAC anticipate attacks may increase as the 2022\/2023 school year begins and criminal ransomware groups perceive opportunities for\u2026","rel":"","context":"In "Ransomware"","block_context":{"text":"Ransomware","link":"https:\/\/blog.cyberconservices.com\/index.php\/category\/ransomware\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":77628,"url":"https:\/\/blog.cyberconservices.com\/index.php\/2025\/01\/28\/todays-business-how-to-combat-the-growing-threat-of-ransomware\/","url_meta":{"origin":31655,"position":5},"title":"Today’s Business: How to combat the growing threat of ransomware","author":"Rick Backus","date":"January 28, 2025","format":false,"excerpt":"In today's digital era, ransomware has become one of the most dangerous cybersecurity threats, affecting organizations of all sizes.","rel":"","context":"In "Ransomware"","block_context":{"text":"Ransomware","link":"https:\/\/blog.cyberconservices.com\/index.php\/category\/ransomware\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/blog.cyberconservices.com\/wp-content\/uploads\/2025\/01\/ai-generated-8560465_1280.jpg?fit=1200%2C679&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/blog.cyberconservices.com\/wp-content\/uploads\/2025\/01\/ai-generated-8560465_1280.jpg?fit=1200%2C679&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/blog.cyberconservices.com\/wp-content\/uploads\/2025\/01\/ai-generated-8560465_1280.jpg?fit=1200%2C679&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/blog.cyberconservices.com\/wp-content\/uploads\/2025\/01\/ai-generated-8560465_1280.jpg?fit=1200%2C679&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/blog.cyberconservices.com\/wp-content\/uploads\/2025\/01\/ai-generated-8560465_1280.jpg?fit=1200%2C679&ssl=1&resize=1050%2C600 3x"},"classes":[]}],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/posts\/31655","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/comments?post=31655"}],"version-history":[{"count":0,"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/posts\/31655\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/media?parent=31655"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/categories?post=31655"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/tags?post=31655"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}