Official Decryption Tools Directory
A curated index of free, legitimate ransomware decryptors released by the FBI, Europol, No More Ransom, and verified research labs. Check here before considering any extortion payment.
Key Facts
- Catalog of official, verified free ransomware decryption utilities provided by law enforcement and CERTs.
- Never pay an extortion demand before checking whether universal decryption keys are publicly accessible.
- All listed utilities are hosted by verified initiatives including No More Ransom, FBI IC3, and Bitdefender.
- Includes guidance on memory dump preservation and shadow copy recovery prior to running decryptors.
CRITICAL RECOVERY ADVISORY
Before running any decryption executable on encrypted systems: (1) create a bit-stream forensic image of encrypted drives, (2) preserve volatile RAM memory, and (3) verify SHA-256 cryptographic hashes against official law enforcement release bulletins. Fake decryptors distributed on search engines frequently deploy secondary wipers.
LockBit 3.0 / LockBit Black
Released 2024Following the infrastructure takedown of LockBit core servers in February 2024, international law enforcement extracted thousands of decryption keys and released a public verification and recovery portal.
ALPHV / BlackCat
Released 2023FBI covertly gained access to ALPHV backend affiliate panels, collecting private decryption keys and releasing a Python decryption utility that saved over 500 victim enterprises more than $68 million in ransoms.
Hive Ransomware
Released 2023Law enforcement penetrated Hive communication networks in July 2022, capturing decryption keys in real time and providing them directly to victims globally for seven months before seizing server infrastructure.
Babuk Ransomware
Released 2021Following internal developer disagreements, the complete source code of Babuk Locker was leaked on a Russian-speaking hacker forum, enabling security researchers to construct universal decryptors for ECDH/ChaCha20 keys.
GandCrab (v1, v4, v5.0 through v5.2)
Released 2019Bitdefender identified cryptographic weaknesses in GandCrab random number generation and later partnered with law enforcement to liberate over 40,000 victim machines without paying over $50 million in demands.
MegaCortex
Released 2023Following the arrest of twelve ransomware affiliates in Ukraine and Switzerland, investigators seized server drives containing thousands of master private keys.