You are welcome to discuss various security topics with our professional team and other users like you!
Read our Registration Agreement and create your FREE account here!

Poll

Will Kaspersky beat this ransomware a 3rd time and provide free decryption?

Yes! They beat it 2 times, it's time for a hat-trick!
2 (66.7%)
Easy, peasy, lemon squeezy!
0 (0%)
I don't know - the cyber crooks upped their game it looks.
0 (0%)
No, the code could have been entirely re-written, hence the new name.
0 (0%)
No! They were lucky that the 2nd time they beat it, the changes weren't so big.
1 (33.3%)

Total Members Voted: 3

Voting closed: June 29, 2016, 05:40:35 pm

*

Execute

  • *****
  • 377
  • +55/-0
  • Your friendly neighbourhood IT guy
      • View Profile
CryptXXX 3.0 is back with a new version. The rebranded ransomware is tougher than before.

After the initial release of CryptXXX 3.0 where the decryption tool provided by the cyber criminals was broken,
UltraCrypter is here. Also known as Cryp1, the new version of the ransomware provides a "special" decrypter.
Kaspersky and other researchers should eventually find flaws in the code and help people by providing a decryption tool.

The ransomware locks files with the .cryp1 extension. You can read more about it in our blog article:
http://sensorstechforum.com/remove-cryp1-ultracrypter-ransomware-restore-cryp1-files/


This is an open, discussion topic. Ask any questions you have related to the ransomware, add new information if you find such,
share your opinion and ideas on what you think about the virus or in what ways UltraCrypter can be defeated.

*

Execute

  • *****
  • 377
  • +55/-0
  • Your friendly neighbourhood IT guy
      • View Profile
TrendMicro have improved one of their tools for decryption, and now it seems to work with the third variant of CryptXXX.
If it works with CryptXXX 3.0, it might work with UltraCrypter as well. You can check it on TrendMicro's site here.

Note! For now only partial recovery of the files is possible.

*

mcinn

  • **
  • 68
  • +26/-0
      • View Profile
Re: UltraCrypter a.k.a. Cryp1 Ransomware is here! (CryptXXX 3.0 version)
« Reply #2 on: June 01, 2016, 09:51:55 am »
Whatever happens, I bet that the cyber criminals operating this ransomware won't just give up and will likely come up with a new and better crypto virus...

*

sentience

  • *
  • 6
  • +7/-0
      • View Profile
Re: UltraCrypter a.k.a. Cryp1 Ransomware is here! (CryptXXX 3.0 version)
« Reply #3 on: June 01, 2016, 05:28:09 pm »
I’m really happy to hear some good news. If the “white hats” succeed to improve their decryption tool, it will be of great use for many infected people. I’m curious to understand what will happen next, so I’ll keep following this topic.

*

Execute

  • *****
  • 377
  • +55/-0
  • Your friendly neighbourhood IT guy
      • View Profile
Re: UltraCrypter a.k.a. Cryp1 Ransomware is here! (CryptXXX 3.0 version)
« Reply #4 on: June 02, 2016, 10:59:42 am »
The owners of CryptXXX proved to be very stubborn, so they probably will make more ransomware indeed.
Researchers on the other hand also put up a fight, so they won't just call it a draw...

I hope the cyber crooks eventully just give up. We shall see...