Attacks using encryption viruses have become a true trend in 2017. Such attacks were recorded a lot, but the loudest of them were WannaCry and NotPetya. Restoring hard disks encrypted with Petya / NotPetya is a tedious, but possible, task.
Sebastian Eschweiler describes the approach to collecting more bytes of bytes, which ultimately leads to the decoding of the full disk. In this article. It was found that this approach is effective in the results of the analyzes performed. This approach continues to improve. If you have any questions, you can contact the developers.
