Free Decryption Tool for Midnight Ransomware Released

On November 6, 2025, Norton unveiled a free decryption tool to combat the rising threat of Midnight ransomware. This breakthrough came after Gen Digital, Norton’s parent company, discovered a flaw in the ransomware’s encryption method. The vulnerability arose from attempts by the cybercriminals to ramp up the encryption strength, according to HackRead.

Midnight ransomware, which is based on the Babuk framework, uses powerful ChaCha20 and RSA encryption. However, an issue with RSA keys created an opportunity for researchers to develop a partial decryption method. This transform a significant flaw into a practical recovery tool for victims, offering a beacon of hope in the fight against these cyberattacks.

The ransomware primarily targets various file types, leaving out .exe, .dll, and .msi formats. Affected files are typically renamed with .Midnight or .endpoint extensions. Typically, victims find a ransom note detailing file recovery instructions accompanied by a debug log, as confirmed by security researchers.

To ensure a swift recovery, both individuals and organizations should maintain comprehensive backups. Doing so enables them to utilize the newly available decryption tool effectively, reducing downtime and potential data loss.

Protect Your Data from Ransomware

Understanding the landscape of ransomware threats is crucial for safeguarding your data. Explore our detailed guide to learn essential insights and strategies to protect your organization from potential ransomware attacks. Prevention is always better than cure when it comes to securing your data.

**Protect your data, prevent threats. Start today.**

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.