The Ragnarok ransomware threat group has appeared to shut down their operations. With no explanation, the group has decided to strip their website of all victim leaks and replaced those with short instructions on how to decrypt files. The website only contains a link to the archive containing the master key and the accompanying binaries for using it. According to researchers who tested the decryptor, it is a master decryptor and can unlock Ragnarok files with various extensions.
Written by: Nataliia Zdrok, Threat Intelligence Analyst at Binary Defense Russia’s invasion of Ukraine increased