Windows 10: TeslaCrypt shuts down and Releases Master Decryption Key

TeslaCrypt shuts down and Releases Master Decryption Key

Read more: http://www.bleepingcomputer.com/news...ecryption-key/

:)

 

How crypto ransomware spreads... is it decryptable...should I pay the ransom

Updated Decryption methods for some types of ransomware:

TeslaCrypt shuts down and Releases Master Decryption Key

How to unlock a .crypt file

http://malwarefixes.com/remove-cryptxxx-ransomware-crypt-file-extension/

Emsisoft Releases Decryptors for the Xorist and 777 Ransomware

 

How crypto ransomware spreads... is it decryptable...should I pay the ransom

The
master decryption keys and decryptor for Crysis Ransomware were released on BleepingComputer.com on 11/14/16. Dharma (.dharma, .wallet, .zzzzz, .onion) are newer variants of CrySiS...the keys for which were released in the
same manner.

• Master Keys for the Dharma Ransomware Released on BleepingComputer.com
  03/01/17.
• Wallet Ransomware Master Keys Released on BleepingComputer
  05/18/17.

Kaspersky released a decrypter for victims of .dharma and .wallet variants...rakhnidecryptor.zip.

ESET released a decrypter for victims of .dharma, .wallet and .onion variants...ESETCrysisDecryptor.exe.

avast also released a decrypter for victims of .dharma and .wallet variants...avast_decryptor_crysis.exe.

 

Who knew malware creators could have a conscience?

 

They don't.
They are just trying not to be found.
They will move and start another program like TeslaCrypt and start all over again.

 

Sure, but they didn't need to give out the decryption key to do that...

 

They've probably made enough to retire. The first month grossed something like $35K.

 

Or their program encrypted the system of someone who could find them and 'make sure they never do anything ever again'

 

They gave up the project because they have decided to focus on the development of a more sophisticated crypt locker "CryptXXX". Here the original wording of the corresponding news read on tomshardware.de (in German): "In den vergangenen Wochen haben die Sicherheitsforscher von ESET bemerkt, dass die Entwickler von TeslaCrypt dazu übergegangen sind, die neue Ransomware CryptXXX zu verteilen." Which translate into something among the lines of: "During the past weeks the security scientists of ESET discovered that the developers (of Teslacrypt) moved on to spreading the new Ransomware CryptXXX".

It's purely a business decision and has absolutely nothing to do with their conscience. In fact they gave away a master key to a software that has already been decrypted. But at least they said sorry *Wink

 

Actually, if you read it correctly, it says their previous distributors moved on to CryptXXX. That means, the malware companies that had been using TeslaCrypt switched to another cryptography provide, cryptxxx. It doesn't say the authors of teslacrypt have moved to cryptxxx.

 

No, it says "Entwickler" which means developers. The German text I postet is an unaltered copy paste of the news read on tomshardware.

 

And it explicitely mentions "Entwickler von TeslaCryp" which means developers of TeslaCrypt. So I'm pretty sure I read it correctly.

 

You are correct in your translation @altae.

I believe the Bleeping Computer article in English says it a bit differently:
TeslaCrypt shuts down and Releases Master Decryption Key

 

Ok. I've read the news on several German websites and they all state that the developers have moved on to CryptXXX. But the meaning of your quote (of an English source) definitely deviates from the one I've read.

Nonetheless I hardly doubt that their decision to stop spreading TeslaCrypt and to provide the master key has got anything to do with their conscience. More with the fact that the software has already been decrypted and thus isn't likely to generate any more income. Keep spreading it is simply not worth the risk anymore.