Check Point releases working Decryptor for the Cerber Ransomware

[Petrovic]

For those who have been affected by the Cerber Ransomware and decided not to pay the ransomware, we have good news for you!  Today, Check Point released a decryption service for the Cerber Ransomware version 1 and version 2 that allows victims to recover their computer's decryption key and decrypt their files for free.  The files types that can be decrypted by this ransomware are those that end with .CERBER and .CERBER2 extensions.  

 

Check Point Cerber Decryption Service

At this time, it is not known how Check Point is able to decrypt the Cerber files, but based on their access to the Cerber backend, they most likely were able to acquire the Master Decryption Key, rather than finding a weakness in the encryption algorithm.  Using this Master Decryption Key, they can then extract a victim's unique key from an uploaded encrypted file.

Article source