25 May 2016

A long-going series of cat and mouse game between Kaspersky Lab and developers of CryptXXX makes the last party to keep their software up-to-date. New version of CryptXXX 3.0 was detected yesterday again. So far no decryptors are available.

It’s been less than two weeks since Kaspersky made an update of their software to decrypt files. But now, new version of ransomware is available again.

According to some user reports, the decryption key obtained “officially” from CryptXXX team does not work. This means, that even if pay the ransom, you will not be able to decrypt your files.

We recommend following the updates from Kaspersky Lab to obtain new decryption tool, if they will make it available.

Currently the official page of their RannohDecryptor says, that files encrypted by Trojan-Ransom.Win32.CryptXXX version 3 are detected, but not decrypted.

We are curious, how quickly CryptoXXX developers will issue another version, or maybe they will just give up.