TLDR InfoSec · MISCELLANEOUS
NEW AKIRA RANSOMWARE DECRYPTOR CRACKS ENCRYPTION KEYS USING GPUS
Summary from the TLDR InfoSec newsletter
A researcher has released an open-source decryptor for Akira ransomware that brute forces encryption keys. Akira generates unique keys for each file using four timestamp seeds, hashes them through 1,500 rounds, and encrypts them with another key, appending them at the end of each file. The researcher analyzed logs to estimate when the ransomware was active and used 16 4090s via RunPod & Vast.ai to decrypt a friend's files in 10 hours.