Avast Releases A Free Decryption Tool For HermeticRansom Ransomware Targeting Ukraine

Avast has released a decryption tool for HermeticRansom Ransomware used in attacks against Ukraine. Security firms aim to help victims who have been targeted by the malware in question recover their files for free.

HermeticRansom is one of three components included in the devastating attacks detailed by security researchers. These components are:

• HermeticWiper: Destroys System Data, Making the System Inoperable.
• HermeticWizard: Allows HermeticWiper Malware to Spread on a Local Network Via WMI and SMB.
• HermeticRansom: A Ransomware Software Written With Go.

Security researchers have discovered a vulnerability in HermoticRansom’s encryption algorithms that could later allow the password to be solved. It is estimated that malware developers have made limited efforts to test Ransomware. This is because the ultimate goal of threat actors is not limited to just performing encryption activities. In this context, HermoticRansom victims can recover their encrypted data with the decryption tool released by Avast. In addition, Avast has published a guide with operating instructions for the published tool.