New Ransomware Strain .rrerp0_p2k Mimics Pay2Key
▼ Summary
– Decryption requires the criminal’s master private key (session key), which is currently unavailable.
– Victims are advised to backup encrypted data and wait for a possible future solution.
– A single support topic is provided for victims to share information, ask questions, and receive assistance.
– The support topic helps experts and staff manage discussions efficiently by consolidating all posts.
– The current topic is closed to avoid confusion, and any decryption solution will be posted in the support topic.
A new ransomware variant has emerged, borrowing key characteristics from the notorious Pay2Key strain. This iteration, identified by the extension .rrerp0_p2k, employs robust encryption that locks files with a session key held exclusively by the attackers. Without access to the criminals’ master private key, file recovery is currently impossible.
For victims who have already been hit, the only viable short-term step is to backup all encrypted data in its current state and wait. There is no known decryption tool available at this time, though experts continue to monitor the situation for potential solutions.
A dedicated support thread has been established for those affected by this ransomware. Victims, including IT consultants and corporate representatives, are encouraged to consolidate their questions, share experiences, and seek assistance there. Centralizing all discussion in a single location helps our staff and experts manage requests more efficiently and ensures timely updates.
When or if a decryption method becomes viable, it will be posted directly in that support topic. To prevent scattered information and confusion, this particular thread has been closed.
Thank you for your cooperation.
The BC Staff
(Source: BleepingComputer)