Kaspersky releases decryption keys for CoinVault ransomware

A repository of decryption keys has been released by Kaspersky Lab to help users to decrypt files locked by CoinVault ransomware. The keys are available to the public free of charge.

Several versions of ransomware have hacked more than 1,000 computers, blocking access to PC functions or locking files, along with demanding a ransom to be paid in bitcoins. Due to the anonymous nature of bitcoin, the criminals can repeat their attacks without fear of getting caught.

CoinVault's victims would find a message saying:
"Your personal documents and files on this computer have just been encrypted. The original files have been deleted and will only be recovered by following the steps described below. Click on "View encrypted files" to see a list of files that got encrypted."

Kaspersky acquired the keys after a raid by the National High Tech Crime Unit (NHTCU) of the Netherlands police seized CoinVault servers that contained vectors, keys and private bitcoin wallets. Kaspersky said that more keys will be added soon.