{"id":5572,"date":"2016-05-13T14:35:10","date_gmt":"2016-05-13T14:35:10","guid":{"rendered":"https:\/\/kasperskydaily.com\/b2b\/?p=5572"},"modified":"2018-09-18T09:22:32","modified_gmt":"2018-09-18T13:22:32","slug":"de-cryptxxx-2","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com.au\/blog\/de-cryptxxx-2\/5572\/","title":{"rendered":"How to beat CryptXXX again: an update"},"content":{"rendered":"<p>This is just a short, off-schedule post for the important topic. In late April Kaspersky Lab reported that it has a tool to crack the encryption of CryptoXXX, a nasty ransomware which demands\u00a0a larger ransom than most of the others.\u00a0It turned out that\u00a0the <a href=\"https:\/\/support.kaspersky.com\/viruses\/disinfection\/8547\" target=\"_blank\" rel=\"noopener\">RannohDecryptor<\/a> utility which was initially created to decrypt files affected by Rannoh ransomware, could\u00a0be used to crack CryptXXX <a href=\"https:\/\/business.kaspersky.com\/de-cryptxxx\/5502\/\" target=\"_blank\" rel=\"noopener nofollow\">as well<\/a>. Or could have been. Because this news have definitely caught the attention of the miscreants behind CryptXXX: they have updated their \u201ctool\u201d in order to make RannohDecryptor useless against this ransomware.<\/p>\n<blockquote class=\"twitter-pullquote\"><p>How to beat CryptXXX again: an update #noransom<\/p><a href=\"https:\/\/twitter.com\/share?url=https%3A%2F%2Fkas.pr%2Fu8VP&amp;text=How+to+beat+CryptXXX+again%3A+an+update+%23noransom\" class=\"btn btn-twhite\" data-lang=\"en\" data-count=\"0\" target=\"_blank\" rel=\"noopener nofollow\">Tweet<\/a><\/blockquote>\n<p>\u201cCriminals and trolls had their laugh\u2026 for a few days\u201d, writes\u00a0Jeff Esposito with Kaspersky Daily. \u201cBut we don\u2019t like to let criminals or trolls win, and are happy to announce that our team has updated our decryption tool to adapt to the second version of CryptXXX in our RannohDecryptor 1.9.1.0.\u201d<\/p>\n<p><em>\u201cThe updated version of CryptXXX ransomware has been successfully decrypted; and a new version of the Kaspersky Lab decryption tool can now help the victims of CryptXXX v2. This tool supports the decryption of about 40 popular file formats, including documents, archives, images, etc. Unfortunately, it is not possible to decrypt any arbitrary file format.\u00a0<\/em><\/p>\n<p><em>We have made the new tool even more easy to use. To decrypt files affected by CryptXXX v2, users don\u2019t need an original copy of any files. Users of the previous versions of this utility will have the opportunity to automatically download the updated version,\u201d <\/em>notes Fedor Sinitsyn, senior malware analyst at Kaspersky Lab.<\/p>\n<p>Please check out details <a href=\"https:\/\/www.kaspersky.com.au\/blog\/cryptxxx-decryption-20\/12091\/\" target=\"_blank\" rel=\"noopener\">here<\/a>\u00a0at Kaspersky Daily.<\/p>\n<p>\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>An update to RannohDecryptor now allows to beat a newer version of CryptXXX too.<\/p>\n","protected":false},"author":209,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1999,2994],"tags":[1577,1833,2421,420],"class_list":{"0":"post-5572","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-business","7":"category-smb","8":"tag-cryptxxx","9":"tag-decryption","10":"tag-mitigation","11":"tag-ransomware"},"hreflang":[{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/de-cryptxxx-2\/5572\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/de-cryptxxx-2\/5572\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/de-cryptxxx-2\/5572\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.com.au\/blog\/tag\/cryptxxx\/","name":"CryptXXX"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/posts\/5572","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/users\/209"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/comments?post=5572"}],"version-history":[{"count":1,"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/posts\/5572\/revisions"}],"predecessor-version":[{"id":21173,"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/posts\/5572\/revisions\/21173"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/media?parent=5572"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/categories?post=5572"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.com.au\/blog\/wp-json\/wp\/v2\/tags?post=5572"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}