The MedusaLocker (.BASANAI) Variant: Forensic Recovery and Decryption Guide
In our recovery lab today at Lockbit Decryptor, we isolated the BASANAI ransomware strain, a confirmed member of the MedusaLocker family. This variant appends the .BASANAI extension and employs a robust RSA-4096 and AES-256 hybrid encryption scheme. Our forensic analysis reveals that while the encryption itself is formidable, the variant inherits a critical flaw from…
