- Forget AirTag: This Bluetooth tracker is my top pick for both iPhone and Android users
- This midrange robot vacuum cleans as well as some flagship models - and it's 50% off
- You may qualify for Apple's $95 million Siri settlement - how to file a claim today
- I changed 6 settings on my Roku TV to give it an instant performance boost
- Your Android devices are getting several upgrades for free - including a big one for Auto
Nibiru ransomware variant decryptor – Cisco Blogs
Nikhil Hegde developed this tool.
Weak encryption
The Nibiru ransomware is a .NET-based malware family. It traverses directories in the local disks, encrypts files with Rijndael-256 and gives them a .Nibiru extension. Rijndael-256 is a secure encryption algorithm. However, Nibiru uses a hard-coded string “Nibiru” to compute the 32-byte key and 16-byte IV values. The decryptor program leverages this weakness to decrypt files encrypted by this variant.
Share:
