05-01-2020 , 03:58 PM
Quote: Kaspersky researchers publish a decryptor that can help get back files encrypted by all strains of Shade/Troldesh ransomware.
Remember Shade ransomware? We’re writing this post because it’s not a threat anymore, and you can get your files back, even those encrypted by the latest versions of Shade. Let’s talk about how that happened.
What is Shade ransomware?
Shade, also known as Troldesh, is a nasty cryptor that began spreading back in 2015. It encrypted office documents, pictures, and archives (as well as some other types of files) and then asked victims to pay for decryption.
Different strains used fancy filenames such as breaking_bad and da_vinci_code.
Shade also brought friends along — it downloaded other malware after it encrypted everything it wanted.
READ MORE »