Security researchers from Emsisoft have released a new, free decryptor for the Ims00rry ransomware. The decryptor unlocks files encrypted by the ransomware in the attacks. The ransomware is known to encrypt files with AES-128 and does not append an extension to encrypted files. Rather, it adds the text “—shlangan AES-256—” in the files. Furthermore, the victim is asked to contact the ransomware creators through a Telegram bot.
Key highlights
Worth noting
In the ransom note, Ims00rry authors ask for a $50 ransom, while strangely citing the need for funding their own business.
“I am sorry!!! My friend. I want to start my own business, but i have no money. All your files photos, databases, documents and other important are encrypted with strongest encryption and algorithms RSA 4096, AES-256. If you want to restore your files payment and write to Telegram bot. Price decrypt software is $50. Attention!!! Do not rename or move the encrypted files.
Bitñoin wàllet:1tnZbveCXmqRS1gfZSxztG5MbdJhptaqu
Contact Telegram bot:@Ims00rybot,” read the ransom note.
Publisher