Regístrese ahora para una mejor cotización personalizada!

Nibiru ransomware variant decryptor

Nov, 17, 2020 Hi-network.com

Nikhil Hegde developed this tool.

Weak encryption

The Nibiru ransomware is a .NET-based malware family. It traverses directories in the local disks, encrypts files with Rijndael-256 and gives them a .Nibiru extension. Rijndael-256 is a secure encryption algorithm. However, Nibiru uses a hard-coded string "Nibiru" to compute the 32-byte key and 16-byte IV values. The decryptor program leverages this weakness to decrypt files encrypted by this variant.

Read more


tag-icon Etiquetas calientes: Código abierto Cisco Talos Talos Ransomware Decryptor decrypt Nibiru ransomware

Copyright © 2014-2024 Hi-Network.com | HAILIAN TECHNOLOGY CO., LIMITED | All Rights Reserved.