megakotaro Posted April 3, 2020 Report Share Posted April 3, 2020 Today our system is hit by devos ransomware. I find a pair of encrypted file and not encrypted file. Is there any chance to decrypt them if I give you a pair of files? devos.zip Link to comment Share on other sites More sharing options...
Demonslay335 Posted April 3, 2020 Report Share Posted April 3, 2020 No. Dharma is not decryptable without the private RSA key only the criminals possess. Restore from backups and stop exposing RDP to the web. Link to comment Share on other sites More sharing options...
Amigo-A Posted April 4, 2020 Report Share Posted April 4, 2020 Quote 昆山豪绅纤维科技开发有限公司.docx.id[38A17CED-2704].[[email protected]].Devos .id[XXXXXXXX-2704].[[email protected]].Devos - this is the file format encrypted by Phobos Ransomware file. Probably Michael wanted to say Phobos Ransomware is not decryptable without paying a ransom, which we do not recommend. 1 Link to comment Share on other sites More sharing options...
Recommended Posts