Privacy Ninja



        • Secure your network against various threat points. VA starts at only S$1,000, while VAPT starts at S$4,000. With Price Beat Guarantee!

        • API Penetration Testing
        • Enhance your digital security posture with our approach that identifies and addresses vulnerabilities within your API framework, ensuring robust protection against cyber threats targeting your digital interfaces.

        • On-Prem & Cloud Network Penetration Testing
        • Boost your network’s resilience with our assessment that uncovers security gaps, so you can strengthen your defences against sophisticated cyber threats targeting your network

        • Web Penetration Testing
        • Fortify your web presence with our specialised web app penetration testing service, designed to uncover and address vulnerabilities, ensuring your website stands resilient against online threats

        • Mobile Penetration Testing
        • Strengthen your mobile ecosystem’s resilience with our in-depth penetration testing service. From applications to underlying systems, we meticulously probe for vulnerabilities

        • Cyber Hygiene Training
        • Empower your team with essential cybersecurity knowledge, covering the latest vulnerabilities, best practices, and proactive defence strategies

        • Thick Client Penetration Testing
        • Elevate your application’s security with our thorough thick client penetration testing service. From standalone desktop applications to complex client-server systems, we meticulously probe for vulnerabilities to fortify your software against potential cyber threats.

        • Source Code Review
        • Ensure the integrity and security of your codebase with our comprehensive service, meticulously analysing code quality, identifying vulnerabilities, and optimising performance for various types of applications, scripts, plugins, and more

        • Email Spoofing Prevention
        • Check if your organisation’s email is vulnerable to hackers and put a stop to it. Receive your free test today!

        • Email Phishing Excercise
        • Strengthen your defense against email threats via simulated attacks that test and educate your team on spotting malicious emails, reducing breach risks and boosting security.

        • Cyber Essentials Bundle
        • Equip your organisation with essential cyber protection through our packages, featuring quarterly breached accounts monitoring, email phishing campaigns, cyber hygiene training, and more. LAUNCHING SOON.

Babuk Ransomware Decryptor Released to Recover Files for Free

Babuk Ransomware Decryptor Released to Recover Files for Free

Czech cybersecurity software firm Avast has created and released a decryption tool to help Babuk ransomware victims recover their files for free.

According to Avast Threat Labs, the Babuk decryptor was created using leaked source code and decryption keys.

The free decryptor can be used by Babuk victims who had their files encrypted using the following extensions: .babuk, .babyk, .doydo.

Also Read: How can businesses protect their enterprise from Business Email Compromise (BEC) attacks?

Babuk ransomware victims can download the decryption tool from Avast’s servers and decrypt entire partitions at once using instructions displayed within the decryptor’s user interface.

From BleepingComputer’s tests, this decryptor will likely work only for victims whose keys were leaked as part of the Babuk source code dump.

Avast Babuk decryptor
Avast Babuk decryptor (BleepingComputer)

Ransomware and decryption keys leak

Babuk gang’s full ransomware source code was leaked on a Russian-speaking hacking forum last month by a threat actor claiming to be a member of the ransomware group.

The decision to leak the code was motivated by the alleged Babuk member by his terminal cancer condition. He said in his leak post that he decided to release the source code while they have to “live like a human.”

The shared archive contained different Visual Studio Babuk ransomware projects for VMware ESXi, NAS, and Windows encryptors, with the Windows folder contains the complete source code for the Windows encryptor, decryptor, and what looked like private and public key generators.

Included in the leak were also encryptors and decryptors compiled for specific victims of the ransomware gang.

Also Read: 6 ways to recognize a potential phishing scam and what to do if you receive one

After the leak, Emsisoft CTO and ransomware expert Fabian Wosar told BleepingComputer that the source code is legitimate and that the archive may also contain decryption keys for past victims.

Babuk Windows encryptor source code
Babuk Windows encryptor source code (BleepingComputer)

Babuk’s troubled history

Babuk Locker, also known as Babyk and Babuk, is a ransomware operation that launched at the beginning of 2021 when it started targeting businesses to steal and encrypt their data as part of double-extortion attacks.

After their attack on the Washington DC’s Metropolitan Police Department (MPD) they landed in U.S. law enforcement’s cross hairs and claimed to have shut down their operation after beginning to feel the heat.

After this attack, the gang’s ‘Admin’ allegedly wanted to leak the stolen MPD data online for publicity, while the other members were against it.

Following this, Babuk members splintered off, with the original admin launching the Ramp cybercrime forum and the others relaunching the ransomware under the Babuk V2 name, continuing to target and encrypt victims ever since.

Right after the Ramp cybercrime forum’s launch, it was targeted by a series of DDoS attacks that eventually led to the site becoming unusable.

While the Babuk Admin blamed his former partners for third incident, the Babuk V2 team told BleepingComputer that they were not behind the attacks.



Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!

Personal Data Protection


We have assisted numerous companies to prepare proper and accurate reports to PDPC to minimise financial penalties.


Click one of our contacts below to chat on WhatsApp

× Chat with us