AvosLocker Actors Seek Apology by Releasing Free Decryptor

Is it the fear of law enforcement?

• A member of the AvosLocker group claimed that they do not have any policy on who they target. However, they usually avoid targeting government agencies and the healthcare sector.
• Knowing that the target was a U.S. federal entity, they provided a decryptor to the compromised department.
• When a media agency prodded on the fear of law enforcement, the member stated that taxpayer money is generally hard to get, and hence, they avoid targeting government entities.
• Furthermore, when requested more information about the hack, the group denied providing a list of stolen files or how they infected the network of the department.

AvosLocker is pretty much active

• Recently, they installed AnyDesk on compromised systems so it works in Safe Mode and then disabled the security tool's components.
• Last month, the ransomware members were observed hunting for partners in the form of access brokers. Experts say they could be attempting to fill the void left by REvil.
• In the past, the ransomware group has claimed victims in the form of premium banking and manufacturing firms.

Conclusion