Decrypting Encrypted files from Akira Ransomware (Linux/ESXI variant 2024) using a bunch of GPUs
tinyhack.com
I recently helped a company recover their data from the Akira ransomware without paying the ransom. I'm sharing how I did it, along with the full source code. The code is here: https://github.com/yohanes/akira-bruteforce To clarify, multiple ransomware variants have been named Akira over the y
    • Flyswat@lemmy.dbzer0.com
      4·
      2 days ago

      Maybe for performance so as to decrease the chances of detection

      Edit: sorry disregard my comment, I read that as “symmetric”. In the case of asymmetric they can only deploy one part of the key which if intercepted cannot be used to decrypt.

      • Valmond@lemmy.world
        1·
        1 day ago

        Yeah that makes sense, I figured they’d just spin up a symmetric key, use it, send it home and delete it locally.