Security News > 2022 > October > Avast releases free decryptor for MafiaWare666 ransomware variants
Avast has released a decryptor for variants of the MafiaWare666 ransomware known as 'Jcrypt', 'RIP Lmao', and 'BrutusptCrypt,' allowing victims to recover their files for free.
Utilizing Avast's tool, victims of the supported ransomware variants can decrypt and access their files again without paying a ransom to the attackers, which ranges between $50 and $300. However, ransom demands reached tens of thousands in some cases.
It should be noted that Avast states that MafiaWare666 also called 'Hades,' which is not the same as the Hades ransomware used by Evil Corp in an attack on ForwardAir.
The Avast decryptor only supports files encrypted by specific variants of the MafiaWare666 ransomware family.
If you were affected by one of these variants, you can download the free decryptor from here, run the executable, select the drive that holds the encrypted files, and point the tool to a sample pair of encrypted and original files.
Those who possess a valid password for decrypting the files but couldn't get the decryptor supplied by MafiaWare666 to work can tick the box and provide it onto Avast's tool.