July 8, 2024 at 02:51PM
Avast has uncovered a weakness in the DoNex ransomware’s encryption, enabling victims to recover their files for free using a decryptor. The flaw affects all past DoNex variants and can be exploited due to intermittent encryption for files larger than 1MB. Avast has released the decryptor, available for users from their website.
Based on the meeting notes, the key takeaway is that Avast has discovered a weakness in the cryptography scheme of the DoNex ransomware family, impacting all past variants. As a result, they have released a decryptor tool for victims to recover their files for free. The weakness involves the generation of encryption keys and intermittent encryption for larger files, introducing vulnerabilities that can be leveraged to restore encrypted data without paying a ransom. The decryptor tool is available for download and requires users to provide encrypted and original files to initiate the decryption process. It is recommended to back up encrypted files before attempting decryption to avoid any potential data corruption.