If you’ve been unfortunate enough to have your files locked by the Jaff ransomware, Kaspersky Lab is now offering a way to decrypt your files for free. Their newly-released decryption tool means that this particular ransomware will no longer cause data loss.
Jaff ransomware first appeared in May and was spread through the Necurs botnet, the same one responsible for spreading Locky.
One thing that clearly distinguishes it from other types of ransomware is that it demands a rather large amount of money in exchange for unlocking your files: 1.79 Bitcoins, to be exact, which is the equivalent of almost $4,000. Typically, most ransomware campaigns tend to request something along the lines of $500 to $1000 worth of Bitcoin.
Kaspersky Lab managed to provide their decryption tool by exploiting a weakness in the malicious code. There are multiple versions of Jaff, and the free tool can be used to counter any one of them.
The ransomware can infect your computer upon opening a PDF file containing the malicious code. The infected file is spread through a phishing email campaign, mostly targeting victims situated in Russia, India, Egypt, Germany, and China.
While it’s still unknown who is behind it, researchers have linked it to a wide cybercrime operation known for dealing in stolen bank account details and those of various websites linked to accepting payments, such as Amazon, PayPal, eBay, and many others.
You can obtain the free RakhniDecryptor tool by visiting Kaspersky Lab’s official website.