Yesterday free decrypters were released by Avast for AtomSilo, Babuk, and LockFile ransomware strains. These will help victims recover the content of their encrypted files.
AtomSilo and LockFile Free Decrypters
As per the report the antivirus producing company published, the decrypters for LockFile and AtomSilo come as one single download option and that happens because the mentioned strains share similarities.
The researchers state that AtomSilo ransomware attack methods are usually characterized by the use of a fixed drive list by means of which a local drives search is performed. On the other hand, LockFile ransomware uses to call GetLogicalDriveStringsA() and processes all fixed drives.
According to the experts who released this tool, the decrypter has also some limitations:
During the decryption process, the Avast AtomSilo decryptor relies on a known file format in order to verify that the file was successfully decrypted. For that reason, some files may not be decrypted. This can include files with proprietary or unknown format, or with no format at all, such as text files.
The decrypter for these two ransomware strains was developed based on Jiří Vinopal’s data, a RE-CERT security researcher who was announcing on October 17 that he discovered a