CyberArk has released the new free White Phoenix ransomware decryptor, which enables partial recovery for files subjected to intermittent encryption as performed by the BianLian, BlackCat/ALPHV, DarkBit, Play, and Qilin/Agenda ransomware operations, reports BleepingComputer. White Phoenix has been developed after various tests with partially encrypted PDF files, with researchers discovering that many PDF file objects have not been affected by specific BlackCat encryption modes, enabling data extraction.
Read full article on SC Magazine