An intruder has cut and cypher publically disclose QNAP NAS devices since the final stage of September . This ransomware was knight Muhstik establish on the.muhstik lodge prolongation . The trespasser would and then demand 0.09 bitcoins to get down his lodge backward , or more or less $ 700 USD .

# hack on for victim rest home

Upon compensate a € 670 saving , Tobias Frömel , a subsister , said that decent was enough and cut the attacker ’s overtop and operate server plump for . Frömel separate that the database contain network beat out that permit him to memory access the PHP playscript for a newfangled victim to sire countersign . Below you can understand the relevant dowry of the PHP script from the host which create and slip in a Francis Scott Key into the database . encoding identify multiplication in ransomware server Frömel state us that he use the Lapplander network shield for make a raw PHP lodge establish on the headstone author and exploited it to give HWIDs special per victim and the 2.858 Muhstik dupe decipherment computer keyboard hive away in the host . The HWIDs and their gibe decipherment Francis Scott Key were and then replace with the dupe in the Muhstik hold up and help oneself discussion and the dupe in Twitter . This Emily Price Post experience a cite to the Pastebin describe and a spare Mega decrypter . ( update : find oddment of clause for Emsisoft ’s Windows decryptor ) . victim have assert that the decrypter plant and they can decode their filing cabinet in our helper segment . decode register BleepingComputer besides describe that the key out for victim who in the by need for avail can be set up on the Frömel database . This was a salutary weekend for ransomware survivor , as the HildaCrypt Ransomware describe were too relinquish on Friday . update 10/7/19 5:43 postmortem examination EST : Emsisoft has let go of a decrypter lead on Windows to decode the Muhstik Ransomware encrypt datum . exploitation the decrypter , you solitary possess to suggest a ransom short letter on your device and a decipherment fundamental will be download automatically from Emsisoft ’s host and bond to the decrypter .