Users can recover their files without paying the ransom.
Security researcher Michael Gillespie has created a decrypter that can help victims of the Unlock92 ransomware recover their files for free.
Unlock92 is a new ransomware variant first spotted by Malwarebytes security researcher S!Ri
yesterday. The ransomware is actually from the same author of the Kozy.Jozy ransomware that appeared over a week ago.
Unlock92 ransomware is related to Kozy.Jozy ransomware
While Kozy.Jozy used a strong RSA-2048 algorithm system that prevented researchers from cracking its encryption routine, it appears that its author decided to make some modifications to Unlock92's codebase that eventually weakened its defenses.
Users can visit the
ID Ransomware service to detect with what type of ransomware they are infected, but they can easily spot a Unlock92 infection based on the CRRRT extension it adds to each encrypted file.
Additionally, the ransomware also changes your wallpaper with a message that tells you to send an email to
unlock92@india.com.
