What is No More Ransom, and can it decrypt our files?

No More Ransom is a free website launched in July 2016 by Europol's European Cybercrime Centre, the Dutch police and security companies, which collects decryption tools for ransomware. By its sixth anniversary in July 2022, Europol reported 136 free tools covering 165 ransomware variants. Its Crypto Sheriff page lets you upload a ransom note or two encrypted files to check whether a tool exists. It is worth checking, but keep expectations realistic: tools exist mainly for older families, for families whose keys were seized by police, and for families with flaws in their encryption. For most current professional groups, no free decryptor exists. Do not upload files containing sensitive personal data without considering your GDPRGDPR: General Data Protection Regulation. The EU data protection law (Regulation (EU) 2016/679). obligations, keep copies of the encrypted files in case a tool appears later, and get advice before running any decryptor on production systems.

← All 25 questions on Ransomware groups and familiesAll topics