The Fonix Ransomware manufacturers have stopped their works and free the master coding tool permitting victims to recover their files.
Fonix Ransomware, or Xinof and FonixCrypter as they known as them selves, began operational in June 2020 and has been steady encrypting victims since. The ransomware operation did not unfold as others, like REvil, Netwalker, or STOP/DJVU, however beginning in Gregorian calendar month 2020, it picked up a small amount, as shown by the ID Ransomware submissions below.
Fonix ransomware admin tweet
Recently, a Twitter user claiming to be a Fonix ransomware admin proclaimed that the ransomware had close up, however partners have another opinion.
His message as shared in the image tells:
I'm one fonix team admins.
you know about fonix team but we have come to the conclusion.
we should use our abilities in positive ways and help others.
Also rans0mware source is completely deleted, but some of team members are
disagree with closure of the project, like telegram channel admin who trying
to scam people in telegram channel by selling fake source and data.
Anyway now main admin has decided to put all previous work aside and
decrypt all infected systems at no cost.
And the decryption key will be available to the public.
The final statement of the team will be announced soon.
Regards-FonixTeam
According to this message, a number of the 'members' of the ransomware operation weren't happy that it had been stopped their works and stop working their servers.
This closedown might cause members to hitch different ransomware affiliate programs or splinter off and build a replacement operation.
another tweet from Fonix ransomware admin
The Fonix Ransomware admin shared a link for a RAR archive named 'Fonix_decrypter.rar' containing each a decryptor and therefore the master personal decoding key.
This decipherment tool isn't a straightforward decipheror which will be employed by a victim to decrypt their files, however is instead Associate in Nursing admin tool used internally by the ransomware operators.
Most ransomware operations enable victims to send many encrypted files that they're going to decipher for free of charge to prove that they will do thus.
Fonix Ransomware Decrypt tool
The free decoder is that the Fonix Ransomware operators' tool once playacting these free take a look at secret writing and doesn't enable a victim to decrypt a complete pc.
Or maybe that it will solely decode one file at the same time, from our tests of the decryptor, it's terribly confusing directions and is liable to flaming.
However, several firms operating laborious on this decoder that may decrypt all versions of the ransomware, that embrace the .Fonix, .FONIX, .repter, .XINOF encrypted file extensions.
