TLDR InfoSec · MISCELLANEOUS

NEW AKIRA RANSOMWARE DECRYPTOR CRACKS ENCRYPTION KEYS USING GPUS

bleepingcomputer.com2 min read

Summary from the TLDR InfoSec newsletter

A researcher released an open-source decryptor for Akira ransomware that brute forces encryption keys. Akira generates unique keys for each file using four timestamp seeds, hashes them through 1,500 rounds, and encrypts them with another key, appending them at the end of each file. The researcher analyzed logs to estimate when the ransomware was active and used 16 4090s via RunPod & Vast.ai to decrypt a friend's files in 10 hours.