Decryptors Released for Yatron and FortuneCrypt Ransomware
Malware Intelligence · 1 source · Updated 3mo ago · First seen Sep 28, 2019
Security researchers released free decryptors for the Yatron and FortuneCrypt ransomware families after finding flaws in how both strains implemented encryption. Yatron, a Hidden Tear-based variant that appends the .Yatron extension to encrypted files, and FortuneCrypt, a Crypren-family ransomware sample compiled with BlitzMax and written in Blitz BASIC, can now be decrypted through updates added to the RakhniDecryptor tool.
The report said defenders had blocked more than 600 Hidden Tear/Trojan-Ransom.MSIL.Tear infections and more than 6,000 Crypren-family attacks over the previous year, with several countries identified as the most affected. The release gives victims of both ransomware families a recovery option without paying attackers and adds relevant malware hashes as indicators of compromise for detection and response.
