Ransomware: Free tool frees files from Conti virus

Kaspersky has released a new version of the tool that allows you to recover files hijacked by Conti ransomware. The attack in question is one of the most widespread since 2019, and critical information about the malicious tool was made public in late 2022.

Experts from the digital security company scoured the forums in February 2023, obtaining data containing 258 private access keys, precompiled decoders, and the malware’s own source code.

free file recovery

In addition to providing subscription protection services, Kaspersky also has a website as ransom, free service aimed at combating data hijacking attacks. Page provides counter tools malware Conti, Bitcryptor, CoinVault and others.

We’ve released a new version of a decryption tool that helps victims of a ransomware modification based on Conti’s previously leaked source code. The tool is available in the latest version of the Kaspersky utility RakhniDecryptor ??https://t.co/J0jElwcjbX pic.twitter.com/Px34typeEmv

— Kaspersky (@kaspersky) 29 March 2023

According to the access keys obtained, 34 of them were related to companies and government agencies affected by Conti. Precompiled decoders suggest, in order: At least 14 victims of the attack succumbed to blackmail and paid the ransom of their data.

Naturally, the company did not release information that would enable the victims to be identified. To get the files back, you need to download the RakhniDecryptor 1.40.0.00 tool and follow the step-by-step instructions given on the website. as ransom.

how to avoid attacks

In its announcement about the update, Kaspersky also listed a number of measures recommended for companies and institutions to prevent remote attacks in general:

• Do not expose remote connection services on public networks unless necessary.
• Use strong passwords as this is the most common gateway for this type of attack.
• Keep the security measures of the VPN services the company uses up to date.
• Examine all data submissions outside the corporate network.
• Make regular data backups on systems isolated from the main network.