Kaspersky, a well-known cybersecurity company, has announced that it has developed a new decryption tool that can help victims of the modified version of Conti ransomware to recover their encrypted data for free. Conti ransomware is a malicious software that encrypts the victim’s files and demands a ransom in exchange for the decryption key. The Conti group is notorious for carrying out hundreds of attacks on organizations, and it has made millions of dollars from extorting businesses by threatening to leak their data.

However, in February 2022, the Conti group made an announcement supporting the Russian government’s invasion of Ukraine. This statement did not sit well with many people, including those who were once considered the Conti ransomware group’s partners-in-arms. As a result, someone leaked 160,000 messages between the Conti group members and the source code for the Conti ransomware.

Using this leaked data, Kaspersky conducted an analysis that allowed it to create a new free decryption tool for those affected by the modified version of the Conti ransomware. The analysis included the source code, over 250 private keys, and pre-compiled decryptors.

According to Kaspersky, it has identified the private keys required to unlock data files for 257 corporate victims. However, 14 of these victims may have already paid the ransom to their attackers. Kaspersky has incorporated the private keys and decryption code into the latest version of its free RakhniDecryptor tool.

It is important to note that most of the attacks perpetrated by this modification of the Conti ransomware targeted Russian organizations, as reported by Bleeping Computer.

The Kaspersky solution is a significant breakthrough for those who have been affected by the modified version of the Conti ransomware. With this free decryption tool, victims can recover their encrypted data without paying the ransom. It is a welcome relief for businesses that may have lost critical data and may not have the resources to pay the ransom.

Kaspersky’s solution is a result of its expertise in cybersecurity and its extensive analysis of the leaked data. The company’s ability to identify the private keys required to unlock data files for the victims is a testament to its technical capabilities.

The Kaspersky decryption tool is easy to use, and victims can download it from the company’s website. However, it is important to note that victims should back up their data before running the decryption tool, just in case.

The development of this new decryption tool by Kaspersky is a significant milestone in the fight against ransomware. It is an important step towards helping victims recover their data without paying a ransom. The tool is also an example of how cybersecurity companies can use their expertise to help those affected by cybercrime.

In May 2022, the US Department of State offered a reward of up to $10,000,000 for information that could help identify the leaders of the Conti ransomware group. A further reward of $5,000,000 was offered for information that helped arrest and/or convict a member of the gang. These rewards demonstrate the severity of the threat posed by ransomware groups such as Conti and the importance of finding ways to combat their activities.