Ransomware MegaCortex: Free Decryption Tool Available

Victims of the MegaCortex ransomware can now decrypt their data without paying ransom. A new free tool by Bitdefender and the NoMoreRansom initiative makes data recovery possible in just a few steps.

The Windows Trojan MegaCortex has been active since 2019, encrypting files on company networks to demand payment for their release. In October 2021, an international police operation against the ransomware groups Dharma, MegaCortex and LockerGoga led to the arrest of twelve suspects responsible for around 1,800 attacks worldwide — primarily targeting corporate infrastructures.

Following the release of the LockerGoga Decryptor, Bitdefender has now published the MegaCortex ransomware decryption tool in cooperation with the NoMoreRansom Project. The free tool can be downloaded directly from Bitdefender’s official site: Download MegaCortex Decryptor.

How the MegaCortex Decryptor Works

After launching the tool, affected users simply select the folder containing encrypted files and click “Start now.” Alternatively, the program can scan the entire system for infected data. Installation is not required. The option “Backup files” is active by default, ensuring that encrypted files remain safely stored in case of any decryption errors.

Prevention and Security Measures

Even with available decryptors, preventive protection remains essential. Regular backups, strict access controls, and proactive security monitoring significantly reduce the risk of ransomware damage. centron supports companies with enterprise-grade ransomware protection and backup & recovery solutions that ensure business continuity even in the event of a cyberattack.

Key Takeaway: Free Recovery, but Prevention First

The new decryptor gives companies a real chance to recover critical data without paying cybercriminals. However, long-term resilience requires strong IT security structures — from professional firewalls to continuous data protection. Proactive defense remains the best strategy against ransomware threats.

Source: Bitdefender Labs