Emsisoft Creates a Free Decryption Solution for Bitcoin-Payment Ransomware, WannaCryFake
Emsisoft, a cybersecurity firm, tackles Bitcoin (BTC) ransomware WannaCryFake, an extension of the WannaCry bug, by creating a free fix for the encryption bug.
WannaCryFake Asks Victims for Bitcoin
According to the blog post, WannaCryFake is defined as a “strain of ransomware that uses AES-256 to encrypt a victim’s files”. The file extension of the encrypted files reads,
The WannaCryFake ransomware encrypts the users’ files by appending the .wannacry extension to the files. Back in 2017, a number of Microsoft users complained due to the rapid infection of the WannaCry virus on their computers. The hackers then ask for payment in Bitcoin to decrypt the files.
This payment to the developers of the ransomware depends on the time taken to get in contact with them, ‘the longer you take the more expensive it gets’. A note created by the ransomware reads,
“You have to pay for decryption in Bitcoins. The price depends on how fast you write to us. After payment we will send you the tool that will decrypt all your files. Before paying you can send us up to 5 files for free decryption.”
Emsisoft Team Free Decryption Tool
However, the development team at Emsisoft warns users against engaging in any form of contact with the WannaCry hackers or pay the ransom in BTC. The new decryption tool provides a free fix for the encrypted files on your computer.
The team statement reads:
“Regardless of what the ransom note might say, our decryption tool can help you recover your files for free and will not cause permanent data loss.”
For WannaCry encrypted files, victims can download the free Emsisoft decryption tool here: https://blog.emsisoft.com/en/34156/emsisoft-releases-free-decryptor-for-wannacryfake-ransomware/.