Popular antivirus company Bitdefender release a decryption tool which can recover files encrypted by LockCrypt ransomware . But the catch is that it can only decrypt files encrypted by an older version of LockCrypt ransomware that locks the files with .1btc extension
The Bitdefender decryption tool may not be useful for current victims of the LockCrypt ransomware, but users who still have copies of their (.1btc) encrypted files can use it to recover files. Using the tool is pretty simple, as the interface is self-explanatory.
The LockCrypt ransomware is a ransomware strain that infects victims after hackers use brute-force attacks to break into companies’ networks via RDP connections, and then manually run the ransomware’s binary.
| LockCrypt version | Status |
|---|---|
| .BI_D | Not decryptable |
| .1btc | Decryptable using Bitdefender tool |
| .lock | Decryptable (contact Michael Gillespie) |
| .2018 | Decryptable (contact Michael Gillespie) |
| .mich | Decryptable (contact Michael Gillespie) |
The ransomware was first spotted in June 2017, and security researchers tracked its authors to a group who was previously active on the Satan Ransomware-as-a-Service portal.
