FunkSec Ransomware Gang Defeated: Free Decryptor Released
Cybersecurity researchers have dealt a significant blow to the FunkSec ransomware group. After the gang's demise, a free decryptor has been released, allowing victims to recover their encrypted files. The tool was developed in collaboration with law enforcement and is available via the No More Ransom project.
FunkSec, which emerged in late 2024, operated for at least four months, targeting primarily German and other European countries. The group initially focused on data exfiltration and extortion, before incorporating encryption into its tactics. It demanded relatively low ransoms, sometimes as low as $10,000, and sold stolen data at reduced prices to third parties.
The ransomware, written in Rust, was uploaded from Algeria and was likely developed using AI-based systems, blending hacktivism and cybercrime. Avast researchers, working with law enforcement, have now released a decryptor for the FunkSec ransomware. The tool can be downloaded via the No More Ransom project, rendering the FunkSec ransomware 'dead'.
The release of the FunkSec decryptor marks a victory for cybersecurity researchers and law enforcement. Victims can now recover their files for free, and the gang's operations have been effectively neutralised. This serves as a reminder that collaboration between the public and private sectors can significantly impact cybercrime.
