thyrex

[thyrex @thyrex2002]

For .MEOW only for files encrypted later October, 2022

[thyrex @thyrex2002]

Contistolen Ransomware with extensions .RUSSIA, .PUTIN, .KREMLIN and .MEOW is free decrypted now after leaking of keys

[thyrex @thyrex2002]

@PakeTariko Are you sure that have files encrypted with one of those versions?

[thyrex @thyrex2002]

Some versions of CryLock 1.8.0.0, 1.9.2.1, 2.0.0.0 can be decrypted now (at least for Russian-speaking users)

[thyrex @thyrex2002]

Decrypted emails for version 2.0.0.0 are:

[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]

[thyrex @thyrex2002]

Decrypted emails for version 1.9.2.1 are:

[email protected]
[email protected]
[email protected]

[Amigo-A @Amigo_A_]

A new #Kanalia #Ransomware in my Digest.
https://t.co/Ftu9bxhGcz
Extension: XJJ
Spreading against Russian-speaking users along with a docx file. Forces to open a second malicious file for execute a primitive encoder. No ransom note found. Decryptable. Thank Thyrex, Sandor.

[Amigo-A @Amigo_A_]

cc @BleepinComputer @malwrhunterteam @demonslay335

[thyrex @thyrex2002]

@Josip76317954 upload sample of encrypted files on https://t.co/hevZCIaY9N and send downloading link

[thyrex @thyrex2002]

Decrypter for CryLock (ex-Cryakl) 1.9.0.0 available now.
Victims may contact me for free decryption.

[thyrex @thyrex2002]

@infernal32 Здравствуйте. Расшифровки для версии 2.0.0.0 нет

[thyrex @thyrex2002]

@MohammadAhsun Upload sample of encrypted file on https://t.co/hevZCIaY9N and send downloading link

[thyrex @thyrex2002]

@MohammadAhsun Hi. Only with version 1.9.0.0

[thyrex @thyrex2002]

@Amigo_A_ @fbgwls245 @BleepinComputer @demonslay335 @siri_urz @malwrhunterteam @JAMESWT_MHT @JakubKroustek Это не CryLock

[thyrex @thyrex2002]

@Evo29627959 Upload sample of encrypted file on https://t.co/hevZCIaY9N and send downloading link

[thyrex @thyrex2002]

@Evo29627959 with version 1.9.0.0 only

[thyrex @thyrex2002]

From FRST.txt after Fonix Ransomware 😄

[thyrex @thyrex2002]

@VaTgPYNe4mgcCzZ Расшифровки этой версии нет

[thyrex @thyrex2002]

#CryLock #Ransomware version 2.0.0.0 was released. Many changes in encoder code.

[thyrex @thyrex2002]

@bellamiye I'm not sure that you have version 1.9.0.0. I need sample of your encrypted file

[thyrex @thyrex2002]

#WannaCash 2.0 #Ransomware (version v170720 and v010820) decryptable now.