ZaToN Ransomware

The ZaToN Ransomware is a low-quality file-locker, which is based on the Xorist Ransomware project. Surprisingly, many cybercriminals have been using the Xorist project in the past couple of months, even though the source code of this ransomware has been available for a few years. The good news is that the Xorist Ransomware's file-encryption routine is not very good, and this makes variants like the ZaToN Ransomware decryptable. If you are a victim of the ZaToN Ransomware attack, you should not listen to the promises of the criminals because you may be able to recover your data for free.

Even though ZaToN Ransomware's creators are using a low-quality file-locker project, they still claim to use a file-locking mechanism, which is impossible to crack. Thankfully, their message is nothing but a bluff, and you can use the free 'Xorist Decryptor' to try and recover files locked by the ZaToN Ransomware. Do not forget that you should ensure the ransomware's full removal before you try to restore any data by running a suitable anti-virus scanner.

Victims of the ZaToN Ransomware will recognize the attack because of the '.ZaToN' extension added to the names of locked files and the fake 'alert' window that this ransomware spawns. The fake message tells victims to contact zaton@tuta.io for more information and prepare to pay 0.04 Bitcoin for the decryption tool. As we already mentioned, following the instructions of the attackers is not needed. You should be able to recover from the attack by following the instructions in the second paragraph.