Shade Ransomware shuts down, releases 750K decryption keys

#1

Post by zynkb0a » Wed, Apr 29, 2020, 12:27 PM UTC

Shade Ransomware shuts down, releases 750K decryption keys
bleepingcomputer.com

Re: Shade Ransomware shuts down, releases 750K decryption keys

#2

Post by zynkb0a » Wed, Apr 29, 2020, 12:30 PM UTC

Here is the team's GitHub: https://github.com/shade-team/keys

What a bizarre situation. I'm wondering what the motivation would be to just apologize and dump decryption keys.

>Kaspersky Lab's Sergey Golovanov told BleepingComputer that he was able to confirm that the keys are valid and was able to use them to decrypt a test machine.

Re: Shade Ransomware shuts down, releases 750K decryption keys

#3

Post by wizzwizz4 » Wed, Apr 29, 2020, 8:11 PM UTC

zynkb0a wrote: post #2

Here is the team's GitHub: https://github.com/shade-team/keys What a bizarre situation. I'm wondering what the motivation would be to just apologize and dump decryption keys. >Kaspersky Lab's Sergey Golovanov told BleepingComputer that he was able to confirm that the keys are valid and was able to use them to decrypt a test machine.

If it's no longer making them money (they've shut down), I see why they'd do this. Even if you getting money is worth more than others' data, their data probably still has some positive value in your ethics system. (Otherwise your malware would wipe everything once you were done.)