{"id":25609,"date":"2024-07-08T19:00:41","date_gmt":"2024-07-08T19:00:41","guid":{"rendered":"https:\/\/gridinsoft.com\/blogs\/?p=25609"},"modified":"2024-07-16T16:11:47","modified_gmt":"2024-07-16T16:11:47","slug":"donex-ransomware-decryptor-released","status":"publish","type":"post","link":"https:\/\/gridinsoft.com\/blogs\/donex-ransomware-decryptor-released\/","title":{"rendered":"Donex, DarkRace, fake LockBit 3.0 and Muse Ransomware Decryptor Released"},"content":{"rendered":"

A decryptor for a Donex ransomware<\/strong>, also known under the name of Muse, DarkRace and LockBit 3.0, has been released by Avast specialists. They used a flaw in the cipher known for almost half a year to help with decryption privately, and now make the decryptor tool available to everyone. This is yet another ransomware family that has become decryptable since the beginning of 2024.<\/p>\n

Donex a.k.a Muse\/DarkRace\/LockBit 3.0 Decryptor Released<\/h2>\n

On July 8 2024, researchers from Avast Decoded published a decryptor tool<\/a> for DoNex ransomware. This malware family has been active since April 2022, originally bearing the name \u201cMuse ransomware\u201d. In November of the same year, they started mimicking the LockBit 3.0 ransomware, following the leak of the builder tool<\/a> of this infamous malware. About half a year later, the threat actor opted for the name DarkRace, which changed once again in March 2024 to Donex ransomware. That March rebranding appears to be the last in the group’s existence, as no new samples appear since May of that year. And now, all its victims will get their files back to normal<\/strong> without paying a copper.<\/p>\n