Decrypting Encrypted files from Akira Ransomware (Linux/ESXI variant 2024) using a bunch of GPUs

“The ransomware uses the current time (in nanoseconds) as a seed.”

Akira ransomware seeds its keys with timestamps, so a researcher brute-forced them on rented GPUs. Sixteen RTX 4090s did it in about 10 hours. The project cost about $1,200 and the victim paid no ransom. Weak randomness beat the criminals.