[German]In case someone's system has been infected by XData ransomware and documents are encrypted, I've good news. A RakhniDecryptor for XData ransomware has been released by security vendor Kaspersky.
Advertising
The XData Ransomware has been addressed at this ESET blog post. The ransomware was active shortly after the WannaCrypt attack (between May 17 and 22, 2017), but the first variants has been detected at December 8, 2016. Xdata ransomware was mainly active in Ukraine, after the trojan has been distributed by a document automation system used for accounting purposes.
Recently the private keys used by this ransomware has been posted within the Bleeping Computer forum. Now Bleeping Computer reported within this article, that Kaspersky provides RakhniDecryptor free of charge for download. The tool is able to decrypt the Xdata encrypted document files.
Advertising
