FunkSec Ransomware Decryptor Released Free to Public After Group Goes Dormant

FunkSec Ransomware Decryptor Released Free to Public After Group Goes Dormant

Cybersecurity experts have released a free decryptor for the FunkSec ransomware, which was active until early 2025. The ransomware primarily targeted the US, India, and Brazil across sectors like technology, government, and education. #FunkSec #GenDigital

Keypoints

  • FunkSec ransomware is now considered inactive, prompting the release of a public decryptor.
  • The ransomware mainly targeted sectors such as technology, government, and education in several countries.
  • FunkSec was developed using Rust and utilized AI-assisted tools in its creation.
  • The encryption employed Chacha20 and Poly1305 algorithms, resulting in files that are approximately 37% larger.
  • Victims should verify encrypted files’ signatures before attempting decryption and back up data first.

Read More: https://thehackernews.com/2025/07/funksec-ransomware-decryptor-released.html