Emsisoft releases new decryptor for Paradise ransomware

[harlan4096]

We just released a new free decryption tool for the Paradise ransomware strain. First detected in September 2017, ID Ransomware reports that it’s still getting submissions to this day. Paradise is actively being distributed and appears to be used as a Ransomware as a Service (RaaS).

Paradise has fifty or more known extensions such as:

Chrysanthemum.jpg_V.0.0.0.1{help@badfail.info}.paradise
Chrysanthemum.jpg_zyJLvg_{defarmx@tutamail.com}.2k19sys
Chrysanthemum.jpg_odLFFK_{immortalsupport@cock.li}.p3rf0rm4
Chrysanthemum.jpg_jfFmkl_{support@p-security.li}.exploit
Chrysanthemum.jpg_wOaUUC_{support@p-security.li}.immortal
Chrysanthemum.jpg_iXcuNs_{petrus34@p-security.li}.sambo
Chrysanthemum.jpg_zbtGvf_{support1prt@cock.li}.prt
Chrysanthemum.jpg_fhskANK_{file@p-security.li}.Recognizer
Chrysanthemum.jpg_Support_{xr2rNX}.FC
Chrysanthemum.jpg_Kim Chin Im_{Jtmv9w}.sev

Most of Paradise’s extensions can be decrypted, but some are still in development. Visit the Emsisoft Decryptions Tools page to verify if the decryptor cannot decrypt your files.

Important: If the decryptor does not work for your files, do not delete them. Archive them so you’re able to unlock them once a decryptor is available.

Sign-up for the Emsisoft newsletter to get notified of new decryptors as soon as they’re released. (Scroll down to the end of this post to fill out the newsletter sign-up form).

You can download the FREE decryption tool linked below. A detailed guide is also included.

Download the Paradise Decryptor here
...

Continue Reading