Members of the notorious ransomware group Avaddon have released decryption keys amid reports that the gang is shutting down.
The news comes just weeks after Avaddon targeted one of the Asian business units of French insurance group AXA, impacting its IT operations and stealing 3TB of data.
However, the hacking group seems to be ready to withdraw from the world of cyber crime, having emailed BleepingComputer 2,934 decryption keys, with each key corresponding to a single victim. The legitimacy of the decryptor was confirmed by security specialists from Emsisoft, which also published a freely accessible version on the software its website, alongside a detailed guide for the victims.
Avaddon's decision to release the decryptor was interpreted as a sign that the ransomware gang was finally suspending its operations. Emsisoft threat analyst Brett Callow had a simple message for the now-retired hackers: "Good riddance."
"Avaddon's victims were many and varied, including AXA, Dade City, Valley National Bank, Presque Isle Police Department, Labor NSW, and the National AIDS Control Council of Kenya," he told IT Pro.
Avaddon is the latest hacking group to have reportedly suspended operations, following similar announcements from the Colonial Pipeline hackers DarkSide and Maze, whose victims included Canon, Xerox, VT San Antonio Aerospace, MaxLinear, and Cognizant.
In a press release obtained by cyber security expert Graham Cluley, members of the Maze collective, which was one of the two most frequentently used ransomware strains of 2020, announced that "the Project is closed",
RELATED RESOURCE
Four ransomware resiliency challenges you can combat with confidence
The benefits of a multi-layered security solution
However, despite this, ransomware attacks are still on the rise, with Egregor ransomware said to be filling the gap. In February, the strain was ranked in the top 10 for detected infections despite only being detected for the first time in September 2020.
The research, conducted by Trend Micro, discovered 127 new ransomware families in 2020 - 34% more than it found in 2019. Despite Egregor's success, 2017's WannaCry is still the most-detected malware family by far, with 220,166 detections infected. The next most popular was Locky, with just 15,816 cases.
Meanwhile, the hacking group Ryuk, which was found to be behind a third of all ransomware attacks in 2020, has not shown any signs of retiring anytime soon.
-
Customizing for Every CustomerPersonalise customer experiences at scale with CRM+AI+Data+Trust. True 1-to-1 personalisation is finally possible.
-
The Data Foundation for the Age of AISee how you can build a data strategy for the age of AI. How Data Cloud unifies data for use in personalisation and grounded AI.
-
Average ransom payment doubles in a single quarterNews Targeted social engineering and data exfiltration have become the biggest tactics as three major ransomware groups dominate
-
BlackSuit ransomware gang taken down in latest law enforcement sting – but members have already formed a new groupNews The notorious gang has seen its servers taken down and bitcoin seized, but may have morphed into a new group called Chaos
-
Google cyber researchers were tracking the ShinyHunters group’s Salesforce attacks – then realized they’d also fallen victimNews In an update to an investigation on the ShinyHunters group, Google revealed it had also been affected
-
Nearly one-third of ransomware victims are hit multiple times, even after paying hackersNews Many ransomware victims are being hit more than once, largely thanks to fragmented security tactics
-
75% of UK business leaders are willing to risk criminal penalties to pay ransomsNews A ransom payment ban is a great idea - until you're the one being targeted...
-
The Scattered Spider ransomware group is infiltrating Slack and Microsoft Teams to target vulnerable employeesNews The group is using new ransomware variants and new social engineering techniques - including sneaking into corporate teleconferences
-
Hackers breached a 158 year old company by guessing an employee password – experts say it’s a ‘pertinent reminder’ of the devastating impact of cyber crimeNews A Panorama documentary exposed hackers' techniques and talked to the teams trying to tackle them
-
The ransomware boom shows no signs of letting up – and these groups are causing the most chaos
News Thousands of ransomware cases have already been posted on the dark web this year
