Latest News

Bitdefender, Europol, Romanian and French Police, FBI Team up for Fourth GandCrab Decryptor

June 2019


The new tool lets victims regain access to the information lost to hackers, without paying ransom. The decryptor counters versions 1 and 4, as well as versions 5 through 5.2, the latest used by cyber-criminals.

Bitdefender, a leading global cybersecurity company protecting over 500 million systems worldwide, today unveils a new decryptor to counter the latest version of GandCrab ransomware. Delivered in partnership with Europol, Romanian Police, DIICOT, FBI, NCA and Metropolitan Police, as well as Police Offices in France, Bulgaria and other Law Enforcement agencies, the decryptor neutralizes the latest versions of GandCrab – the most prolific families of file-encrypting malware to date.

The new tool lets victims regain access to the information lost to hackers, without paying ransom. The decryptor counters versions 1 and 4, as well as versions 5 through 5.2, the latest used by cyber-criminals.

The previous decryptors for the GandCrab ransomware released by Bitdefender and partner law enforcement agencies have helped more than 30,000 victims recover ransomed data and save more than 50 million dollars by not paying ransom.

GandCrab emerged in January 2018 and quickly gained traction due to its affiliate-based monetization scheme, reaching a whopping 50% share of the ransomware market by August 2018.

In recent interactions on private underground forums, the GandCrab operators claimed that they have extorted more than $2 billion from victims. The joint efforts of Bitdefender and partner law enforcement agencies have weakened the operators’ position on the market and ed criminal affiliates to distrust the service, leading to the demise and shutdown of the operation.

“Our efforts in providing decryptors for GandCrab victims have weakened the ransomware operators by cutting off their monetization mechanisms,” said Bitdefender representatives. “In addition to delivering relief for victims, these efforts have contributed to establishing a positive mindset among new victims, who would rather wait for a new decryptor than give in to hackers’ ransom demands.”

To prevent ransomware infections, users should implement a security solution with layered anti-ransomware defenses, regularly back up their data and avoid opening attachments delivered with unsolicited messages.

Bitdefender and its partner law enforcement agencies advise victims to not give in to the demands of ransomware operators. Instead, they should back up the encrypted information and notify police immediately.

The new decryption tool is available immediately and can be downloaded for free on Bitdefender Labs and the No More Ransom Project.

 

About Bitdefender

Bitdefender is a global cybersecurity leader protecting over 500 million systems in more than 150 countries. Since 2001, Bitdefender innovation has consistently delivered award-winning security products and threat intelligence for the smart connected home, mobile users, modern businesses and their networks, devices, data centers and Cloud infrastructure. Today, Bitdefender and its Labs is also the provider vendor of choice, embedded in over 38% of the world’s security solutions. Recognized by industry, respected by vendors and evangelized by customers, Bitdefender is the cybersecurity company you can trust and rely on. www.bitdefender.com