The decryption tool also has been added to Kaspersky’s “No Ransom” website.įurthermore, Kaspersky has provided several recommendations to help organizations protect against Conti attacks, including:

Its associated decryption code and all 258 keys were added to the latest build of Kaspersky’s RakhniDecryptor 1.40.0.00 utility. The decryption tool protects victims of the recently discovered Conti modification, Kaspersky said. This ultimately prompted Kaspersky to update its public decryptor. The data contained 258 private keys, source code and pre-compiled decryptors. In February 2023, Kaspersky experts found a new portion of leaked data from Conti attacks published on forums. This shows that 14 out of 257 potential Conti attack victims paid a cyber ransom. Meanwhile, 34 of these folders had “explicitly named companies and government agencies,” Kaspersky indicated. These keys were spread across 257 folders. In December 2022, Kaspersky specialists found a Conti malware variant with leaked private keys, the company stated. Since that time, various cybercrime groups modified Conti and used it in their cyberattacks. Previously, Conti’s source code was leaked in March 2022, Kaspersky noted. To date, cybercriminals have distributed this variant and used it to attack companies and state institutions.

Kaspersky is offering a new version of its decryption tool to protect organizations against a modified Conti ransomware variant discovered in December 2022, according to a prepared statement.

Kaspersky total protection