decryption

Hive ransomware: Researchers figure out a method to decrypt files

Researchers have found a flaw in the Hive ransomware encryption method that allows them to recover a high percentage of the encrypted files.

Ransomware / Reports

Babuk ransomware builder leaked following muddled “retirement”

Heads are being scratched after the Babuk ransomware builder appears on VirtuTotal, adding to the gang’s reputation for confusion.

Mac

Mac ThiefQuest malware may not be ransomware after all

We discovered a new Mac malware, ThiefQuest, that appeared to be ransomware at first glance. However, once we dug in deeper, we found out its true identity—and intention.

Malware / Threat analysis

Napoleon: a new version of Blind ransomware

The ransomware previously known as Blind has been spotted recently with a .napoleon extension and a bug fix that means files can no longer be decrypted by victims. In this post, we’ll analyze the sample for its structure, behavior, and distribution method.