VCrypt Decryptor is a tool created by the multinational telecommunications company, Telefónica, which was designed with the purpose of decrypting which files have been affected by the VCryptor ransomware.
This tool free allows users to recover their files after a VCryptor attack without having to pay the ransom requested by hackers.
VCrypt Decryptor was designed by ElevenPaths in conjunction with the cybersecurity and IT company McAfee, which is part of an initiative born in 2016, called No More Ransom which translated into Spanish means “no more ransomware”. Other important companies and entities in the security sector also participate in this initiative, such as Kaspersky, an international company dedicated to computer security; the National Police of the Netherlands, Politie and the Police Entity of the European Union, Europol. In addition, in No MOre Ransom there are other important partners that have contributed value to the initiative that seeks to reduce the cases of victims due to ransomware attacks, while monitoring cybercriminals and exposing them to the competent authorities in the area.
The purpose of No More Ransom is to decrypt and provide effective solutions to more than 130 types of ransomware that currently exist and that can put at risk the encrypted files managed by organizations and companies, such as the multinational Telefónica.
It may interest you: BlockFi data breach puts several of its customers in physical danger
VCryptor, an extortion ransomware
Telefónica's Cyber Security Department, ElevenPaths, explained that the ransomware VCryptor creates a protected ZIP file where encrypted data is stored and then creates new files with the extension .vcrypt which are intended to replace the original files. Subsequently, the ransomware sends a message to the victim to notify them of the attack.
In the message sent by this ransomware, the affected person is requested to pay in cryptocurrencies, as part of the ransom for their stolen files. Furthermore, the victim is told that he or she will only be able to regain access to his or her files until the requested payment is made. On the other hand, VCrypt also executes a propagation attack that spreads through an executable link, which is sent through the first victim's computer, looking for a “friendly” propagation method that allows it to infect more users through of the same attack.
However, the tool designed by the company is capable of discovering the password that protects the ZIP file to decrypt the files and files contained within this file, so VCryptor Decryptor takes advantage of weaknesses detected in the encryption method used by hackers in this ransomware.
Source: No More Ransom
With VCrypt Decryptor, users will be able to recover their encrypted files without having to pay the ransom. Additionally, they can download the tool for free from the No More Ransom website, in the “Decryption Tools” section.
Telefónica, faithful collaborator of anti-ransomware tools
The telecommunications company has been actively participating in the design and creation of various tools to minimize ransomware attacks. In this sense, Telefónica participated in the creation of the tool Popcorn, which was intended to decrypt the files and files that were encrypted under the attack of the Popcorn ransom.
Likewise, the company began to participate in the design of tools that help prevent scams and extortion resulting from these attacks. Since in 2017 it was a victim of the Wanna Decryptor ransomware that carried out multiple attacks on various telecommunications and IT organizations and companies, among which Telefónica was one of the most affected. This ransomware managed to obtain the data of several of its employees, leaving them without access to said files until they canceled the requested reward.
Therefore, since then, Telefónica's Cyber Security Department has been developing joint efforts with the No More Ransom project.
Continue reading: The growth of investments in blockchain by Spanish companies continues
