Pierluigi Paganini reports:
Japanese authorities released a free decryptor for Phobos and 8Base ransomware, allowing victims to recover files without paying.
Japanese police released the free decryptor for ransomware families, which was likely built using intel from a recent gang takedown. The software can be downloaded from the police website and Europol’s NoMoreRansom site.
The tool works on files with extensions like .phobos, .8base, .elbie, .faust, and .LIZARD, and may support others. Despite false malware flags from some browsers, tests confirm it works and is safe. Europol and the FBI are promoting it as an official recovery solution.
NoMoreRansom warns users to remove the malware first with a reliable antivirus before using the decryptor, or files may be re-encrypted repeatedly.
Read more at SecurityAffairs.