{"id":29539,"date":"2019-10-07T14:28:29","date_gmt":"2019-10-07T14:28:29","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/30560\/Whitehat-Hacks-Muhstik-Ransomware-Gang-And-Release-Keys.html"},"modified":"2019-10-07T14:28:29","modified_gmt":"2019-10-07T14:28:29","slug":"whitehat-hacks-muhstik-ransomware-gang-and-release-keys","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/","title":{"rendered":"Whitehat Hacks Muhstik Ransomware Gang And Release Keys"},"content":{"rendered":"<p><span class=\"img aspect-set\"><img decoding=\"async\" src=\"https:\/\/zdnet1.cbsistatic.com\/hub\/i\/2019\/10\/07\/991565b9-7a08-4175-8c4c-efebc1335a35\/762e0f72dd45fc7810d84b949963d3dc\/muhstik.png\" class alt=\"Muhstik\"><\/span><span class=\"credit\">Image: ZDNet<\/span> <\/p>\n<p>A user got his revenge on the ransomware gang who encrypted his files by hacking their server and releasing the decryption keys for all other victims.<\/p>\n<p>This happened earlier today and involved the Muhstik gang. Muhstik is a recent strain of ransomware that has been active since late September, according to reports [<a href=\"https:\/\/www.bleepingcomputer.com\/forums\/t\/705604\/muhstik-qnap-ransomware-muhstik-support-topic\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">1<\/a>, <a href=\"https:\/\/www.bleepingcomputer.com\/forums\/t\/705368\/ranson-muhstik-qnap\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">2<\/a>, <a href=\"https:\/\/www.reddit.com\/r\/qnap\/comments\/dbhhuq\/help_needed_desperately\/?sort=new\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">3<\/a>].<\/p>\n<p>This ransomware targets network-attacked storage (NAS) devices made by Taiwanese hardware vendor QNAP. The gang behind the Muhstik ransomware is brute-forcing QNAP NAS devices that use weak passwords for the built-in phpMyAdmin service, according to <a href=\"https:\/\/www.qnap.com\/en-us\/security-advisory\/NAS-201910-02\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">a security advisory published by the company last week<\/a>.<\/p>\n<p>After gaining access to the phpMyAdmin installation, Muhstik operators encrypt users&#8217; files and save a copy of the decryption keys on their command and control (C&amp;C) server. QNAP files encrypted by Muhstik can be recognized by each file&#8217;s new &#8220;.muhstik&#8221; file extension.<\/p>\n<h3>Annoyed software dev hacks back<\/h3>\n<p>One of the gang&#8217;s victims was <a href=\"http:\/\/www.cryonix.de\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">Tobias Fr\u00f6mel<\/a>, a German software developer. Fr\u00f6mel was one of the victims who paid the ransom demand so he could regain access to his files.<\/p>\n<p>However, after paying the ransom, Fr\u00f6mel also analyzed the ransomware, gained insight into how Muhstik operated, and then retrieved the crooks&#8217; database from their server.<\/p>\n<p>&#8220;I know it was not legal from me,&#8221; the researcher wrote in <a href=\"https:\/\/pastebin.com\/raw\/N8ahWBni\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">a text file he published online on Pastebin<\/a> earlier today, containing 2,858 decryption keys.<\/p>\n<section class=\"sharethrough-top\" data-component=\"medusaContentRecommendation\" data-medusa-content-recommendation-options=\"{&quot;promo&quot;:&quot;promo_ZD_recommendation_sharethrough_top_in_article_desktop&quot;,&quot;spot&quot;:&quot;dfp-in-article&quot;}\">\n<\/section>\n<p>&#8220;I&#8217;m not the bad guy here,&#8221; Fr\u00f6mel added.<\/p>\n<h3>Free decryption method now available<\/h3>\n<p>Besides releasing the decryption keys, the German developer also published a decrypter that all Muhstik victims can use to unlock their files. The decrypter is available on <a href=\"https:\/\/mega.nz\/#!O9Jg3QYZ!5Gj8VrBXl4ebp_MaPDPE7JpzqdUaeUa5m9kL5fEmkVs\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">MEGA<\/a> [<a href=\"https:\/\/www.virustotal.com\/gui\/file\/367f9d781738611690c15843a8fb9566155b4977f51b6751aef26f9f4e8403d4\/detection\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">VirusTotal scan<\/a>], and <a href=\"https:\/\/www.bleepingcomputer.com\/forums\/t\/705604\/muhstik-qnap-ransomware-muhstik-support-topic\/page-9#entry4882035\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">usage instruction<\/a>s are avaiable on the Bleeping Computer forum.<\/p>\n<p>In the meantime, Fr\u00f6mel has been busy notifying Muhstik victims on Twitter about the decrypter&#8217;s availability, advising users against paying the ransom.<\/p>\n<p><span class=\"img aspect-set\"><img decoding=\"async\" src=\"https:\/\/www.zdnet.com\/article\/white-hat-hacks-muhstik-ransomware-gang-and-releases-decryption-keys\/\" class=\"lazy\" alt=\"muhstik-battleck.png\" height=\"auto\" width=\"370\" data-original=\" https:\/\/zdnet1.cbsistatic.com\/hub\/i\/r\/2019\/10\/07\/57f16fe5-3ced-495e-91ff-ac5bfe0d10f1\/resize\/370xauto\/c505c31f907771eee216240dcfc51e21\/muhstik-battleck.png\"><\/span><noscript><\/p>\n<p><span class=\"img aspect-set\"><img decoding=\"async\" src=\"https:\/\/zdnet1.cbsistatic.com\/hub\/i\/r\/2019\/10\/07\/57f16fe5-3ced-495e-91ff-ac5bfe0d10f1\/resize\/370xauto\/c505c31f907771eee216240dcfc51e21\/muhstik-battleck.png\" class alt=\"muhstik-battleck.png\" height=\"auto\" width=\"370\"><\/span><\/p>\n<p><\/noscript> <span class=\"credit\">Image: ZDNet<\/span><\/p>\n<p>Fr\u00f6mel did not want to comment further for this article besides the Pastebin post. A security researcher who saw Fr\u00f6mel&#8217;s work told <em>ZDNet<\/em> that he notified authorities and also provided information about the Muhstik gang in the hopes of aiding authorities track down the hackers.<\/p>\n<p>Despite Fr\u00f6mel&#8217;s actions being against the law, it&#8217;s very unlikely that he&#8217;ll be prosecuted for hacking back the Muhstik gang and helping thousands of victims. However, security researchers are advised to work with authorities when hacking back, similar to <a href=\"https:\/\/www.zdnet.com\/article\/avast-and-french-police-take-over-malware-botnet-and-disinfect-850000-computers\/\" target=\"_blank\" rel=\"noopener noreferrer\">how Avast worked with French police to take down the Retadup botnet<\/a>.<\/p>\n<p>This is the third ransomware strain that has been spotted this year targeting NAS devices, after <a href=\"https:\/\/www.zdnet.com\/article\/this-new-ransomware-is-targeting-network-attached-storage-devices\/\" target=\"_blank\" rel=\"noopener noreferrer\">eCh0raix<\/a> and <a href=\"https:\/\/www.zdnet.com\/article\/ransomware-crooks-hit-synology-nas-devices-with-brute-force-password-attacks\/\" target=\"_blank\" rel=\"noopener noreferrer\">another unnamed strain targeting Synology devices<\/a>. <a href=\"https:\/\/www.bleepingcomputer.com\/ransomware\/decryptor\/ech0raix-ransomware-decryptor-restores-qnap-files-for-free\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">A free decrypter<\/a> was released for eCh0raix victims in August.<\/p>\n<p><em>Fr\u00f6mel&#8217;s quotes have been edited for proper spelling.<\/em><\/p>\n<p> READ MORE <a href=\"https:\/\/packetstormsecurity.com\/news\/view\/30560\/Whitehat-Hacks-Muhstik-Ransomware-Gang-And-Release-Keys.html\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":29540,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[277],"tags":[8017],"class_list":["post-29539","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity-blogs","tag-headlinehackermalwarecybercrimefraudpasswordcryptography"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Whitehat Hacks Muhstik Ransomware Gang And Release Keys 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Whitehat Hacks Muhstik Ransomware Gang And Release Keys 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2019-10-07T14:28:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/10\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"455\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Whitehat Hacks Muhstik Ransomware Gang And Release Keys\",\"datePublished\":\"2019-10-07T14:28:29+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/\"},\"wordCount\":474,\"publisher\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/10\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys.png\",\"keywords\":[\"headline,hacker,malware,cybercrime,fraud,password,cryptography\"],\"articleSection\":[\"CyberSecurity Blogs\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/\",\"url\":\"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/\",\"name\":\"Whitehat Hacks Muhstik Ransomware Gang And Release Keys 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/10\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys.png\",\"datePublished\":\"2019-10-07T14:28:29+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/#primaryimage\",\"url\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/10\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys.png\",\"contentUrl\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/10\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys.png\",\"width\":1000,\"height\":455},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.threatshub.org\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"headline,hacker,malware,cybercrime,fraud,password,cryptography\",\"item\":\"https:\/\/www.threatshub.org\/blog\/tag\/headlinehackermalwarecybercrimefraudpasswordcryptography\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Whitehat Hacks Muhstik Ransomware Gang And Release Keys\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#website\",\"url\":\"https:\/\/www.threatshub.org\/blog\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\/\/www.threatshub.org\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Whitehat Hacks Muhstik Ransomware Gang And Release Keys 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/","og_locale":"en_US","og_type":"article","og_title":"Whitehat Hacks Muhstik Ransomware Gang And Release Keys 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2019-10-07T14:28:29+00:00","og_image":[{"width":1000,"height":455,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/10\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys.png","type":"image\/png"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Whitehat Hacks Muhstik Ransomware Gang And Release Keys","datePublished":"2019-10-07T14:28:29+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/"},"wordCount":474,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/10\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys.png","keywords":["headline,hacker,malware,cybercrime,fraud,password,cryptography"],"articleSection":["CyberSecurity Blogs"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/","url":"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/","name":"Whitehat Hacks Muhstik Ransomware Gang And Release Keys 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/10\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys.png","datePublished":"2019-10-07T14:28:29+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/10\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys.png","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/10\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys.png","width":1000,"height":455},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/whitehat-hacks-muhstik-ransomware-gang-and-release-keys\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"headline,hacker,malware,cybercrime,fraud,password,cryptography","item":"https:\/\/www.threatshub.org\/blog\/tag\/headlinehackermalwarecybercrimefraudpasswordcryptography\/"},{"@type":"ListItem","position":3,"name":"Whitehat Hacks Muhstik Ransomware Gang And Release Keys"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/29539","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=29539"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/29539\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/29540"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=29539"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=29539"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=29539"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}