A New Decryption Method and a New Financial Scam


White Phoenix Online Decryption Tool

by Artie Kaye

White Phoenix, a free software application developed by CyberArk, has been given an online iteration which allows ransomware victims to decrypt their files without having to download and install the program. The tool is useful against intermittent encryption used by many ransomware groups. There are some limitations to the online functionality, including a 10 MB file size limit and its incompatibility with some file types. For larger files, the downloadable version would be necessary. When recovering files, always back up the encrypted files before attempting to decrypt them.

Third-Party references:

Click the links below to learn more details. (Opens in a new tab/window.)


Courier Scam

by Artie Kaye

An FBI alert was issued regarding scammers that were convincing victims to purchase precious metals, or to cash out their assets in an attempt to safeguard their money. If a victim followed through, a courier was be sent to pick up the funds; all with the promise that they’d be stored in a personalized account for them. Once the handoff was made, the victim would never see their money again. The notice released by the FBI gives some tips regarding measures one can take to avoid this kind of scam:

  • The US Government and legitimate businesses will never request you purchase gold or other precious metals.
  • Protect your personal information. Never disclose your home address or agree to meet with unknown individuals to deliver cash or precious metals.
  • Do not click on unsolicited pop-ups or links that appear on your computer, in text messages, or emails. Do not download or open unsolicited email attachments.
  • Do not contact unknown telephone numbers provided in pop-ups, texts, or emails.
  • Do not download software at the request of unknown individuals who contact you.
  • Do not allow unknown individuals access to your computer.
Third-Party references:

Click the links below to learn more details. (Opens in a new tab/window.)