Security News > 2021 > February > Ziggy ransomware shuts down and releases victims' decryption keys
The Ziggy ransomware operation has shut down and released the victims' decryption keys after concerns about recent law enforcement activity and guilt for encrypting victims.
Over the weekend, security researcher M. Shahpasandi told BleepingComputer that the Ziggy Ransomware admin announced on Telegram that they were shutting down their operation and would be releasing all of the decryption keys.
Today, the Ziggy ransomware admin posted a SQL file containing 922 decryption keys for encrypted victims.
In addition to the decryptor and the SQL file, the ransomware admin shared the source code for a different decryptor with BleepingComputer that contains offline decryption keys.
Ransomware infections use offline decryption keys to decrypt victims infected while not being connected to the Internet or the command and control server was unreachable.
The ransomware admin also shared these files with ransomware expert Michael Gillespie who created a decryptor for the Ziggy Ransomware using the released keys.