{"id":261883,"date":"2021-05-28T22:50:32","date_gmt":"2021-05-28T19:50:32","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/ransomware-groups-decryptors-are-so-slow-its-almost-not-worth-it-review-geek\/"},"modified":"2021-05-28T22:50:32","modified_gmt":"2021-05-28T19:50:32","slug":"ransomware-groups-decryptors-are-so-slow-its-almost-not-worth-it-review-geek","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/ransomware-groups-decryptors-are-so-slow-its-almost-not-worth-it-review-geek\/","title":{"rendered":"#Ransomware Group\u2019s Decryptors Are So Slow It\u2019s Almost Not Worth It \u2013 Review Geek"},"content":{"rendered":"

“#Ransomware Group\u2019s Decryptors Are So Slow It\u2019s Almost Not Worth It \u2013 Review Geek”<\/strong><\/p>\n

\n
\"digital
iStock<\/span><\/figcaption><\/figure>\n

Ransomware attacks are nothing new, but two recent hits have received a lot of attention, and in both cases, the decryptor was too slow to do any good. Essentially, victims often resort to backups or find a different solution, even after paying a ransom for the decryptor key.<\/p>\n

A new\u00a0report<\/a> from BleepingComputer<\/em> goes into detail about the entire situation. Explaining that the highly publicized Colonial Pipeline hack resulted in a $4.4 million ransom payment for a decryptor. Unfortunately, the\u00a0Darkside decryptor was so slow the company restored everything from backups instead of using the key, even though it paid up.<\/p>\n

In another situation, HSE, the healthcare system of Ireland, was hit by a Conti attack yet refused to pay a ransom. The Conti ransomware group eventually released the decryptor key for free<\/a>, likely after realizing they hit a government agency. Similar to the Colonial situation, this key was too slow. In the end,\u00a0HSE worked with a New Zealand cybersecurity firm named Emsisoft, whose decryptor is twice as fast.<\/p>\n

Now, we\u2019re not saying these companies should or shouldn\u2019t pay. That\u2019s a tough thing to discuss when it\u2019s a hospital or, ya know, a pipeline as large as Colonial\u2019s that the entire country relies on. That said, it looks like even when they do pay, the hackers\u2019 own recovery tool is barely worth it.<\/p>\n

During BleepingComputer\u2019s<\/em> testing, using a custom decryptor tool like one from\u00a0Emsisoft helped restore a hacked system up to 41% faster than the tool provided by any specific ransomware group. That might not sound like a lot, but when you\u2019re decrypting\u00a0thousands of devices and terabytes of data, this could make the process days, or even weeks, faster.<\/p>\n

When it comes to restoring something like the Colonial Pipeline or a healthcare system, time is money, or more importantly, time can save lives.<\/p>\n

Emsisoft charges for their restoration services, too, but at least that\u2019s not enabling or incentivizing ransomware groups to keep doing this.<\/p>\n

via BleepingComputer<\/a><\/small>\n<\/div>\n