Skip to content

The Spanish multinational company launches a free tool to decrypt files affected by VCryptor ransomware

June 4, 2020

On June 3, the telecommunications conglomerate based in Spain Telefónica has launched a free tool to restore data encrypted by VCryptor ransomware.

The VCrypt Decryptor tool was developed as part of an international initiative entitled “No More Ransomware”. This alliance was founded by McAfee, Europol, Politie and Kaspersky. It is one of several tools used to decrypt almost 134 types of ransomware.

The VCrypt attack method

According to ElevenPaths, Telefónica’s specialized cybersecurity department, VCryptor creates a password-protected ZIP file in which all encrypted data is stored. Then new files with the extension “.vcrypt” are generated to replace the original files.

The Spanish multinational company launches a free tool to decrypt files affected by VCryptor ransomwareThe Spanish multinational company launches a free tool to decrypt files affected by VCryptor ransomware

The ransomware then launches a message informing the victim that the attack was carried out.. You are instructed to pay an attacker a ransom through cryptocurrencies to restore access to files. Bitcoin (BTC) is the currency of choice for most hackers.

ElevenPaths’ free tool aims to exploit a vulnerability in the VCryptor password encryption method.

Continuous efforts

The cybersecurity department of Telefónica also participated in the creation of free tools to decrypt the files affected by the PopCorn ransomware.

Cointelegraph reported an alliance between Interpol and the cyber security company Kaspersky. Together they launched a campaign called “The Anti-Ransomware Day”., set for May 12th. The aim of the day is to raise awareness of the effects of cyber attacks on ransomthat continue to affect people and businesses worldwide.