CryTox/Waiting (.wait) Ransomware

In our recovery lab today at Lockbit Decryptor, we isolated the CryTox/Waiting ransomware strain, identified by the .wait extension and communication via qTox. Our forensic analysis confirms this is a sophisticated, enterprise-targeting ransomware operation. This strain employs a robust hybrid cryptosystem. Critically, our analysis indicates that this variant correctly implements the cryptographic primitives, and no…