Developer releases decryption toolkit for various ransomware

A developer using the pseudonym Jadacyrus has created a toolkit that can undo “hostage” by various types of ransomware. The toolkit is available for free and is primarily intended for security researchers and system administrators.

The maker has put his so-called Ransomware Response Kit on Bitbucket. With the toolkit, it is possible to fight infections with various types of ransomware. There is support for Cryptolocker, TrendMicro_Ransomware, FBIRansomware, CoinVault and TeslaCrypt. According to the creator, who uses the pseudonym Jadacyrus, the software has been developed for security researchers and system administrators: the source code has been made available but has not been poured into an easy-to-use application.

According to the compiler, the toolkit is a collection of existing tools to remove ransomware. The Ransomware Response Kit therefore does not contain any new tools to tackle ransomware, but it should make it easier to use the right tool.

Jadacyrus advises to first remove an infected system from the network and then proceed with repair. After that, the user has to identify the ransomware and then the toolkit can be applied. The Ransomware Response Kit will then attempt to decrypt the files held hostage. The exact chance of success has not been reported. Jadacyrus also recommends making a software copy of the ransomware installation – this can help analyze the infection and improve decryption capabilities.

According to the maker, parts of the software are already redundant because ransomware develops quickly. However, he promises to keep the Ransomware Response Kit up-to-date as much as possible.