Cybersecurity researchers at Avast, a Gen Digital brand, have today released a free decryptor for the FunkSec ransomware, providing a ray of hope for organizations and individuals whose data has been encrypted by the relatively new threat. The decryptor’s release comes after the FunkSec group, which emerged in late 2024 and was known for leveraging AI in its operations, appears to have ceased activity.
FunkSec ransomware, identified by the “.funksec” file extension appended to encrypted files and a ransom note typically named “README-{random}.md,” has impacted at least 172 victims globally, according to data from Ransomware.live. The United States, India, and Brazil were among the most targeted countries, with technology, government, and education sectors bearing the brunt of the attacks.
While FunkSec was initially seen as a dual-extortion threat, exfiltrating data before encryption, analysis by Avast and other security firms like Check Point suggests the group was comprised of less experienced actors who utilized AI tools for malware development and crafting phishing templates. Despite this, the ransomware proved effective in disrupting services and encrypting data, demanding ransoms that were often surprisingly low, sometimes as little as $10,000.
“Because the ransomware is now considered dead, we released the decryptor for public download,” stated Ladislav Zezula, a malware researcher at Gen Digital. This sentiment is echoed by the fact that the group has not added any new victims to its data leak site since mid-March 2025.
The newly released decryptor, available through the No More Ransom project, offers victims a crucial opportunity to recover their files without succumbing to the attackers’ demands. Users are advised to verify that their encrypted files match FunkSec’s signature before attempting decryption and to back up all affected data as a precautionary measure.
The development of this decryptor highlights the ongoing efforts by cybersecurity firms and law enforcement agencies worldwide to combat ransomware and aid victims. It also serves as a reminder that while new threats emerge, the collaborative nature of the cybersecurity community often leads to breakthroughs that can mitigate the damage caused by these malicious attacks.
![Online Scam Cases Continue to Rise Despite Crackdowns on Foreign Fraud Networks [Myanmar]](https://sumtrix.com/wp-content/uploads/2025/06/30-12-120x86.jpg "Online Scam Cases Continue to Rise Despite Crackdowns on Foreign Fraud Networks [Myanmar]")
