The creater of Petya ransomware appeared on Twitter to help victims to unlock their files encrypted by a new version of "Petya", also known as "NotPetya".
Yes he is back after 6 months.
"We're back having a look in NotPetya," tweeted Janus, Petya creator. "Maybe it's crackable with our privkey. Please upload the first 1MB of an infected device, that would help."
This announcement made by Petya creator proposes he may have master key to decrypt the affected data, which if worked for the new variation of Petya contaminated documents, casualties would have the capacity to decode their records locked in the current cyber attack.
Janus sold Petya to other hackers in March 2016 as a Ransomware-as-a-Service (RaaS), original Petya was designed to lock victim's computer,to collect ransom amount.
Since Janus is looking at the new code and if he succeeds in decrypting victims hard drive, but it won't be much helpful untill researchers find a way to recover MBR, which is wiped by petya.
Yes he is back after 6 months.
"We're back having a look in NotPetya," tweeted Janus, Petya creator. "Maybe it's crackable with our privkey. Please upload the first 1MB of an infected device, that would help."
This announcement made by Petya creator proposes he may have master key to decrypt the affected data, which if worked for the new variation of Petya contaminated documents, casualties would have the capacity to decode their records locked in the current cyber attack.
Janus sold Petya to other hackers in March 2016 as a Ransomware-as-a-Service (RaaS), original Petya was designed to lock victim's computer,to collect ransom amount.
Since Janus is looking at the new code and if he succeeds in decrypting victims hard drive, but it won't be much helpful untill researchers find a way to recover MBR, which is wiped by petya.
Comments
Post a Comment