No-More-Ransom, an initiative by the National High Tech Crime Unit of the Netherlands’ police, Europol’s European Cybercrime Centre and two cyber security companies – Kaspersky Lab and Intel Security, has decrypted files affected by the Wildfire ransomware.

Coinfox reported that No-More-Ransom published a decryption app that frees the victims from the need to pay bitcoin ransom. The Wildfire Decryptor is the latest addition to six other decryption tools by the team which includes Chimera, Teslacrypt, Shade, CoinVault, Rannoh and Rakhni.

Wildfire’s main targets were Dutch and Belgian users. Virus Guides reported that the researchers found that the total number of WildFire infections was 5,768 with perpetrators receiving 136 Bitcoins ($80,000) as ransom.

The ransomware was spread via spam emails that claimed that they are from a transport company that could not deliver a package. The users were asked to download the attached form and complete it to schedule a new delivery. This form, containing malicious macro scripts, asked users to enable macros to view content. Once enabled, the Wildfire is downloaded and executed on the victim’s computer.

Currently, the decryptor includes 1,600 keys for WildFire and more will be added soon.