"Avast Releases Free Decryptor for Mallox Ransomware"

Anti-malware vendor Avast recently published a free decryption tool to help victims to recover from the Mallox ransomware attacks.  Mallox ransomware was fisrt observed in 2021, and is also known as Fargo, TargetCompany, and Tohnichi.  Mallox has been operating under the ransomware-as-a-service (RaaS) business model and is known for targeting Microsoft SQL servers for initial compromise.  Avast noted that in the past, Mallox's developers have focused on improving the ransomware's cryptographic schema, but the researchers at Avast say a weakness in the schema has paved the way for the creation of a decryptor to help restore data caught up in data extortion attacks.  Avast said the decryption tool targets files encrypted in 2023 or early 2024 and with the extensions .bitenc, .ma1x0, .mallab, .malox, .mallox, .malloxx, and .xollam.  

SecurityWeek reports: "Avast Releases Free Decryptor for Mallox Ransomware"