An offline key for the Nusm variant of STOP (djvu) ransomware has been added to the Emsisoft server. As a result, it is now possible to decrypt .Nusm files that were encrypted with the offline key. It is not difficult to find out what key the files were encrypted with, it is enough to look at the personal ID (it is located in the “_readme.txt” file), if the personal ID ends in “t1”, then you are lucky, now you can completely decrypt the encrypted files.
We tried to decrypt files using Nusm File Decrypt Tool (STOP Djvu decryptor). All encrypted files have been successfully decrypted. More information about Nusm virus in the next article: Remove Nusm virus (.nusm file extension) Nusm File Recovery.