But these are only users that were protected by Kaspersky Lab’s detection technologies. Unfortunately the total number of attacked users is much higher. The actual figure is not known, but Kaspersky Lab experts estimate that there may be several hundred thousand infected users.
“Our regular advice to the victims of different ransomware families is the following: even if there is currently no decryption tool available for the version of malware that encrypted your files, please don’t pay the ransom to criminals. Save the corrupt files and be patient – the probability of a decryption tool emerging in the near future is high. We consider the case of CryptXXX v.3 as proof of this advice. Multiple security specialists around the world are continuously working hard to be able to help victims of ransomware. Sooner or later the solution to the vast majority of ransomware will be found,” said Anton Ivanov, security expert at Kaspersky Lab.
The decryption tool can be downloaded from Kaspersky Lab’s website and from Nomoreransom.org – the website of the not-for-profit initiative launched this year by the National High Tech Crime Unit of the Netherlands’ police, Europol’s European Cybercrime Centre and two cyber security companies, Kaspersky Lab and Intel Security, with the goal of helping victims of ransomware to retrieve their encrypted data without having to pay the criminals.
Our other advice is to think proactively and protect yourself in advance. It’s much more convenient not to get your files corrupted in the first place. To do this, follow these two simple steps:
1. Back up your data regularly on a detachable media that is not kept connected to your computer all the time.
2. Install a good security solution. By the way, recent independent studies showed that Kaspersky Internet Security is extremely good against ransomware.
Learn more about the CryptXXX ransomware family on Securelist.com.
