TeslaCrypt ransomware victims can now decrypt their files for free

Victims of the widespread TeslaCrypt ransomware are in luck: Security researchers have created a tool that can decrypt files affected by recent versions of the malicious program.

Surprisingly, the TeslaCrypt creators themselves helped the researchers.

The tool can recover TeslaCrypt-encrypted files whose extension was changed to .xxx, .ttt, .micro and .mp3, as well as those whose extension hasn’t been modified. Instructions on downloading and using the tool can be found on ESET’s support website.

TeslaCrypt ransomware victims can now decrypt their files for free | PCWorld

UsernameIssues said:

I doubt that those getting cash from victims of TeslaCrypt are the creators of TeslaCrypt. They probably rented/leased the TeslaCrypt tool. Maybe they were upset with the person renting them the tool - so they rendered current versions useless by giving away the master key.

Or, maybe their lease was up and they did not want this version of the TeslaCrypt tool to be leased to others.

...just guessing....

That's what I was wondering about also. Some good thoughts there. Why would they just fold up shop if they were making money. Either way, it's good there's a way to decrypt it now.