Ransomware

FONIX

First seen: 2020-06 • Status: inactive

Currently Inactive

FONIX ransomware shut down and gave away their decryption keys. All victims can now recover their files.

Overview

FONIX operators shut down and released their master decryption key, allowing all victims to recover.

Also Known As

XINOF

How It Spreads

  • Phishing
  • Cracked software

What It Does

  • File encryption

Is your business exposed?

Target Platforms

Windows

Detection Tips

  • Historical - decryptors available

MITRE ATT&CK Techniques

T1486

If You're Infected

  1. 1.

    Use released master key at Kaspersky

Is your business exposed?

Check if your company data is circulating on the dark web

Free scan • No credit card required