Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Petya ransomware developer releases master decryption key.

  • This topic is locked This topic is locked
1 reply to this topic

#1 techghost


  • Members
  • 191 posts
  • Gender:Male
  • Local time:06:57 AM

Posted 10 July 2017 - 01:05 PM

The original developer of the Petya ransomware has released a master decryption key that works for all prevision versions of its enciphering creation.
Source & more details: 

BC AdBot (Login to Remove)


#2 quietman7


    Bleepin' Janitor

  • Global Moderator
  • 52,047 posts
  • Gender:Male
  • Location:Virginia, USA
  • Local time:08:57 PM

Posted 10 July 2017 - 01:12 PM

Grinler, the site owner of Bleeping Computer posted an article a few days ago.

Author of Original Petya Ransomware Publishes Master Decryption Key

This key can decrypt all ransomware families part of the Petya family except NotPetya...This list includes:
* First Petya ransomware version (flashed white skull on red background during boot-up screens)
* Second Petya version that also included Mischa ransomware (flashed green skull on black background during boot-up screens)
* Third Petya version, also known as GoldenEye ransomware (flashed yellow skull on black background during boot-up screens)

...The key will only help those victims who cloned their drives and saved a copy of the encrypted data.

...This key won't help NotPetya victims because the NotPetya ransomware was created by "pirating" the original Petya ransomware and modifying its behavior by a process called patching. NotPetya used a different encryption routine and was proven to have no connection to the original Petya...

Rather than have everyone with individual topics, it would be best (and more manageable for staff) if folks posted any questions, comments or requests for assistance in the below support topic discussion.To avoid unnecessary confusion, this topic is closed.

The BC Staff
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users