---
title: Shade Ransomware Operators Apologize and Release 750K Keys
description: A popular type of ransomware, Shade, recently announced it was stopping all operations. This is a huge win for the cyber security industry. Over 750,000 encryption keys were released.
image: https://www.agmonitoring.com/hubfs/Images/Blog%20Assets/Facebook%20Size%20Banner%20Images%20%28Blog%29/Shade%20Ransomware-Operators-Apologize-Banner-FB.png
---

[![AG_Logo_BecklarCo_white](https://www.agmonitoring.com/hs-fs/hubfs/Images/Logos/AG%20Logos/AG_Logo_BecklarCo_white.png?width=657&height=178&name=AG_Logo_BecklarCo_white.png "AG_Logo_BecklarCo_white")](https://agmonitoring.com)

[![Dealer](https://no-cache.hubspot.com/cta/default/4280184/9ec27b82-55c0-4206-800b-604843cece9a.png)](https://cta-redirect.hubspot.com/cta/redirect/4280184/9ec27b82-55c0-4206-800b-604843cece9a)

**

** **

#### [![Security_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Industries/Security_icon.png?width=201&name=Security_icon.png) Security](https://www.agmonitoring.com/industries/wholesale-security-monitoring)

#### [![Fire_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Industries/Fire_icon.png?width=201&name=Fire_icon.png) Fire](https://www.agmonitoring.com/industries/fire-alarm-monitoring)

#### [![PERS_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Industries/PERS_icon.png?width=200&name=PERS_icon.png) PERS](https://www.agmonitoring.com/industries/pers-monitoring)

#### [![IoT_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Industries/IoT_icon.png?width=201&name=IoT_icon.png) IOT](https://www.agmonitoring.com/industries/iot-internet-of-things)

#### [![Professional_Monitoring_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Services/Professional_Monitoring_icon.png?width=150&name=Professional_Monitoring_icon.png) Professional Monitoring](https://www.agmonitoring.com/services/professional-monitoring)

#### [![Cloud_Monitoring_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Services/Cloud_Monitoring_icon.png?width=150&name=Cloud_Monitoring_icon.png) Cloud Monitoring Platform](https://www.agmonitoring.com/services/cloud-monitoring-platform)

#### [![Hybrid_Monitoring_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Services/Hybrid_Monitoring_icon.png?width=150&name=Hybrid_Monitoring_icon.png) Hybrid Monitoring](https://www.agmonitoring.com/services/hybrid-central-monitoring-services)

#### [![Articles_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Resources/Articles_icon.png?width=150&name=Articles_icon.png) Articles](https://www.agmonitoring.com/blog/industry-news)

#### [![Webinar_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Resources/Webinar_icon.png?width=150&name=Webinar_icon.png) Webinars](https://www.agmonitoring.com/resources?resourceSearch=&topicType=show-all&contentType=1)

#### [![Heros_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Resources/Heros_icon.png?width=150&name=Heros_icon.png) Hero Stories](https://www.agmonitoring.com/blog/ag-news)

#### [![Marketing_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Resources/Marketing_icon.png?width=150&name=Marketing_icon.png) Marketing Toolkit](https://www.agmonitoring.com/resources/marketing-toolkit)

#### [![About_Us_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Company/About_Us_icon.png?width=200&name=About_Us_icon.png) About Us](https://www.agmonitoring.com/company)

#### [![Careers_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Company/Careers_icon.png?width=200&name=Careers_icon.png) Careers](https://www.agmonitoring.com/company/careers)

#### [![Partners_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Company/Partners_icon.png?width=200&name=Partners_icon.png) Partners](https://www.agmonitoring.com/company/partners)

#### [![Credentials_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Company/Credentials_icon.png?width=200&name=Credentials_icon.png) Credentials](https://www.agmonitoring.com/company/credentials)

[![AG_Logo_BecklarCo](https://www.agmonitoring.com/hs-fs/hubfs/Images/Logos/AG%20Logos/AG_Logo_BecklarCo.png?width=657&height=178&name=AG_Logo_BecklarCo.png "AG_Logo_BecklarCo")](https://agmonitoring.com)

[![Dealer](https://no-cache.hubspot.com/cta/default/4280184/841fca42-41df-4209-a163-3297156a61c3.png)](https://cta-redirect.hubspot.com/cta/redirect/4280184/841fca42-41df-4209-a163-3297156a61c3)

**

** **

 

#### [![Security_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Industries/Security_icon.png?width=201&name=Security_icon.png) Security](https://www.agmonitoring.com/industries/wholesale-security-monitoring)

#### [![Fire_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Industries/Fire_icon.png?width=201&name=Fire_icon.png) Fire](https://www.agmonitoring.com/industries/fire-alarm-monitoring)

#### [![PERS_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Industries/PERS_icon.png?width=200&name=PERS_icon.png) PERS](https://www.agmonitoring.com/industries/pers-monitoring)

#### [![IoT_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Industries/IoT_icon.png?width=201&name=IoT_icon.png) IOT](https://www.agmonitoring.com/industries/iot-internet-of-things)

#### [![Professional_Monitoring_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Services/Professional_Monitoring_icon.png?width=150&name=Professional_Monitoring_icon.png) Professional Monitoring](https://www.agmonitoring.com/services/professional-monitoring)

#### [![Cloud_Monitoring_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Services/Cloud_Monitoring_icon.png?width=150&name=Cloud_Monitoring_icon.png) Cloud Monitoring Platform](https://www.agmonitoring.com/services/cloud-monitoring-platform)

#### [![Hybrid_Monitoring_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Services/Hybrid_Monitoring_icon.png?width=150&name=Hybrid_Monitoring_icon.png) Hybrid Monitoring](https://www.agmonitoring.com/services/hybrid-central-monitoring-services)

#### [![Video_Monitoring_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Video_Monitoring_icon.png?width=150&height=150&name=Video_Monitoring_icon.png) Video Monitoring](https://www.agmonitoring.com/services/features/interactive-video-monitoring)

#### [![Articles_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Resources/Articles_icon.png?width=150&name=Articles_icon.png) Articles](https://www.agmonitoring.com/blog/industry-news)

#### [![Webinar_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Resources/Webinar_icon.png?width=150&name=Webinar_icon.png) Webinars](https://www.agmonitoring.com/resources/webinars)

#### [![Heros_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Resources/Heros_icon.png?width=150&name=Heros_icon.png) Hero Stories](https://www.agmonitoring.com/blog/ag-news)

#### [![Marketing_icon](https://www.agmonitoring.com/hs-fs/hubfs/Images/Icons/Icons%20for%20Main%20Navigation%20Bar/Resources/Marketing_icon.png?width=150&name=Marketing_icon.png) Marketing Toolkit](https://www.agmonitoring.com/resources/marketing-toolkit)

Search this site on Google

Search Google

**Menu**

** **

[![Dealer](https://no-cache.hubspot.com/cta/default/4280184/841fca42-41df-4209-a163-3297156a61c3.png)](https://cta-redirect.hubspot.com/cta/redirect/4280184/841fca42-41df-4209-a163-3297156a61c3)

[![Resource Center](https://no-cache.hubspot.com/cta/default/4280184/513a68dd-c45b-41e9-a4a6-21e4417689ee.png)](https://cta-redirect.hubspot.com/cta/redirect/4280184/513a68dd-c45b-41e9-a4a6-21e4417689ee)

![](https://www.agmonitoring.com/hubfs/Images/Blog%20Assets/Banner%20Images%20(Blog)/Shade%20Ransomware-Operators-Apologize-Banner.png)

[Security/Fire](https://www.agmonitoring.com/blog/industry-news/tag/security-fire) | [Internet of Things (IoT)](https://www.agmonitoring.com/blog/industry-news/tag/internet-of-things-iot)

 1 min read

# Shade Ransomware Operators Apologize and Release 750K Keys

 Written by [Brannon Morrison](https://www.agmonitoring.com/blog/industry-news/author/brannon-morrison)

 May 4, 2020 2:30:00 PM

Shade, a type of ransomware, has been making headlines. Recently, the developers and operators of the malware that has operated since 2014 decided to up and quit. Further, after making a public apology on GitHub, they have released 750,000 encryption keys to those currently affected by the hack.

## An Overview

In 2014, a ransomware that encrypts files and adds various extensions to them was discovered. This became known as Shade, and for several years, only targeted primarily Russian victims. However, it quickly grew into one of the [top three encryptors](https://securelist.com/the-shade-encryptor-a-double-threat/72087/) in that area. Last year, according to research done by the Palo Alto Network, Shade expanded by going after targets across the globe, including the United States, Canada, India, and Japan.

“We are the team which created a trojan-encryptor mostly known as Shade, Troldesh or Encoder.858. In fact, we stopped its distribution at the end of 2019.” the actors stated. “All other data related to our activity (including the source codes of the trojan) was irrevocably destroyed. We apologize to all the victims of the trojan and hope that the keys we published will help them to recover their data.”

## The Keys

The 750,000 keys released each likely represent one attack. This displays how widespread this malware truly was. While no specific reason has been narrowed down for this sudden change of heart, the motive doesn’t matter. This is a huge victory for the “good guys,” regardless.

In addition to supplying the keys along with a formal apology, the malicious actors posted detailed instructions to assist in the removal of the ransomware currently affecting what is thought to be nearly three-quarters of a million people. The operators even went as far as to provide a note explaining that if a victim is still having problems decrypting their files, to patiently wait for cyber security companies to post tools utilizing the keys provided for an easier decryption experience.

If you are worried about your risk when it comes to cyber security, don’t worry. There are [plenty of things](https://www.agmonitoring.com/blog/industry-news/home-security-monitoring-how-to-encrypt-your-home-network) you can do to stay proactive in maintaining your online security. Reach out to [AvantGuard](http://agmonitoring.com) today to see what we offer, and what solutions we offer to keep you secure.

## A Great Offer, Just a Click Away

Lorem ipsum dolor sit amet, consectetur adipiscing elit

![](https://cdn2.hubspot.net/hub/273774/hubfs/mp/themes/Act-Theme/images/act-sample-opa1.jpg?width=900&name=act-sample-opa1.jpg)

**

Take advantage of our robust library of industry and AG related news, articles, webinars and other resources available through our [resource center](https://www.agmonitoring.com/resources/resource-center) to enhance your success.  You will also discover valuable insights and content you can share with your subscribers through your website, newsletters, and emails.

Receive more useful content like this by signing up for our weekly AG Newsletter below:

Previous Story

[← The AG Update: Ep. 55](https://www.agmonitoring.com/blog/industry-news/the-ag-update-ep.55)

[** ](https://www.agmonitoring.com/blog/industry-news)

Next Story

[Hybrid Monitoring Can Be a Lifeline For Central Stations →](https://www.agmonitoring.com/blog/industry-news/hybrid-monitoring-can-be-a-lifeline-for-central-stations)

**AvantGuard Monitoring Centers, LLC. | P.O. Box 15022 | Ogden, UT 84415 | Office: (877) 206-9141 | Fax: (801) 781-6133**

###### [Industries](https://www.agmonitoring.com/industries)

[Security](https://www.agmonitoring.com/industries/wholesale-security-monitoring)  
[Fire](https://www.agmonitoring.com/industries/fire-alarm-monitoring)  
[PERS](https://www.agmonitoring.com/industries/pers-monitoring)  
[IoT](https://www.agmonitoring.com/industries/iot-internet-of-things)

###### [Services](https://www.agmonitoring.com/services)

[Pricing](https://www.agmonitoring.com/services/features/dealer-pricing-estimates)  
[Features](https://www.agmonitoring.com/services/features/)  
[Professional](https://www.agmonitoring.com/services/professional-monitoring)  
[Cloud](https://www.agmonitoring.com/services/cloud-monitoring-platform)  
[Hybrid](https://www.agmonitoring.com/services/hybrid-central-monitoring-services)  
[Technology](https://www.agmonitoring.com/company/central-station-technology)  
[Migration](https://www.agmonitoring.com/company/account-migration-process)  
[Cybersecurity](https://www.agmonitoring.com/resources/cybersecurity)  
[Integrations](https://www.agmonitoring.com/integrations)  
[Crash Detection](https://www.agmonitoring.com/industries/iot-monitoring/crash-detection)

###### [Resources](https://www.agmonitoring.com/resources)

[Resource Center](https://www.agmonitoring.com/resources/resource-center)  
[Articles](https://www.agmonitoring.com/blog/industry-news)  
[Webinars](https://www.agmonitoring.com/resources/webinars)  
[AG Hero Stories](https://www.agmonitoring.com/blog/ag-news)  
[Glossary](https://www.agmonitoring.com/resources/alarm-glossary)  
[Help Center](https://avantguard.zendesk.com/hc/en-us)

###### [Company](https://www.agmonitoring.com/company)

[About Us](https://www.agmonitoring.com/company)  
[Careers](https://www.agmonitoring.com/company/careers)  
[Partners](https://www.agmonitoring.com/company/partners)  
[Awards](https://www.agmonitoring.com/awards)  
[Credentials](https://www.agmonitoring.com/company/credentials)

###### [Legal](https://www.agmonitoring.com/legal)

[Licensing](https://www.agmonitoring.com/licensing)  
[Privacy Policy](https://www.agmonitoring.com/legal/privacy-policy)  
[Your Privacy Choices](https://becklar.com/privacy-request/)  
[Terms & Conditions](https://www.agmonitoring.com/legal/terms-conditions)

**Download The AG App  
**

![applestore_white](https://www.agmonitoring.com/hubfs/applestore_white.png)

<https://itunes.apple.com/us/app/avantguard-monitoring/id1453441224?mt=8>

![googleplay_white](https://www.agmonitoring.com/hubfs/googleplay_white.png)

<https://play.google.com/store/apps/details?id=com.avantguard.avantguardmonitoring>

** **

[![Contact Us](https://no-cache.hubspot.com/cta/default/4280184/6b891a2e-39fc-4b00-a66e-a8da2af5ba99.png)](https://cta-redirect.hubspot.com/cta/redirect/4280184/6b891a2e-39fc-4b00-a66e-a8da2af5ba99)

<https://twitter.com/AvantGuardMon><https://www.linkedin.com/company/816968><https://www.facebook.com/232693466022>

Copyright © 2019 AvantGuard Monitoring, LLC. All Rights Reserved.

[![tma-5-diamond-logo_white](https://www.agmonitoring.com/hs-fs/hubfs/Images/Logos/Certification%20Logos/tma-5-diamond-logo_white.png?width=200&name=tma-5-diamond-logo_white.png "tma-5-diamond-logo_white")](https://www.agmonitoring.com/company/credentials)

[![ul-logo_white](https://www.agmonitoring.com/hs-fs/hubfs/Images/Logos/Certification%20Logos/ul-logo_white.png?width=200&name=ul-logo_white.png "ul-logo_white")](https://www.agmonitoring.com/company/credentials)

[![fm-approval-logo_white](https://www.agmonitoring.com/hs-fs/hubfs/Images/Logos/Certification%20Logos/fm-approval-logo_white.png?width=200&name=fm-approval-logo_white.png "fm-approval-logo_white")](https://www.agmonitoring.com/company/credentials)

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Brannon Morrison",
    "url" : "https://www.agmonitoring.com/blog/industry-news/author/brannon-morrison"
  },
  "dateModified" : "2020-05-04T20:30:00.764Z",
  "datePublished" : "2020-05-04T20:30:00.000Z",
  "headline" : "Shade Ransomware Operators Apologize and Release 750K Keys",
  "image" : [ "https://www.agmonitoring.com/hubfs/Images/Blog%20Assets/Facebook%20Size%20Banner%20Images%20%28Blog%29/Shade%20Ransomware-Operators-Apologize-Banner-FB.png" ],
  "mainEntityOfPage" : {
    "@id" : "https://www.agmonitoring.com/blog/industry-news/shade-ransomware-operators-apologize-and-release-750k-keys",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://www.agmonitoring.com/hubfs/1-Becklar_Master%20(15).png"
    },
    "name" : "Becklar Monitoring"
  }
}
```

```json
{
  "@context" : "http://schema.org",
  "@type" : "Organization",
  "alternateName" : "AvantGuard",
  "contactPoint" : {
    "@type" : "ContactPoint",
    "areaServed" : "US",
    "availableLanguage" : "English",
    "contactOption" : "TollFree",
    "contactType" : "customer service",
    "telephone" : "+18772069141"
  },
  "logo" : "https://cdn2.hubspot.net/hubfs/4280184/Website%20Assets/Logos/logo.png",
  "name" : "AvantGuard Monitoring Centers",
  "sameAs" : [ "https://www.facebook.com/AvantGuardMon/", "https://twitter.com/avantguardmon", "https://www.instagram.com/avantguardmon/", "https://www.linkedin.com/company/avantguard-monitoring-centers" ],
  "url" : "https://agmonitoring.com"
}
```

```json
{
  "@context" : "http://schema.org",
  "@id" : "",
  "@type" : "ProfessionalService",
  "address" : {
    "@type" : "PostalAddress",
    "addressCountry" : "",
    "addressLocality" : "Ogden",
    "postalCode" : "84403",
    "streetAddress" : "4699 Harrison Blvd."
  },
  "geo" : {
    "@type" : "GeoCoordinates",
    "latitude" : 41.1780108,
    "longitude" : -111.9500321
  },
  "image" : "https://cdn2.hubspot.net/hubfs/4280184/Website%20Assets/Logos/logo.png",
  "name" : "AvantGuard Monitoring Centers",
  "openingHoursSpecification" : {
    "@type" : "OpeningHoursSpecification",
    "closes" : "23:59",
    "dayOfWeek" : [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday", "Sunday" ],
    "opens" : "00:00"
  },
  "priceRange" : "$$$",
  "sameAs" : [ "https://www.facebook.com/AvantGuardMon/", "https://twitter.com/avantguardmon", "https://www.instagram.com/avantguardmon/", "https://www.linkedin.com/company/avantguard-monitoring-centers" ],
  "telephone" : "8772069141",
  "url" : "https://www.agmonitoring.com/"
}
```

```json
{
  "@context" : "http://schema.org",
  "@id" : "#website",
  "@type" : "WebSite",
  "name" : "AvantGuard Monitoring",
  "potentialAction" : {
    "@type" : "SearchAction",
    "query-input" : "required name=search_term_string",
    "target" : "https://www.agmonitoring.com/?s={search_term_string}"
  },
  "url" : "https://www.agmonitoring.com/"
}
```

```json
// <![CDATA[
{
  "@context": "http://schema.org",
  "@type": "BlogPosting",
  "headline": "Shade Ransomware Operators Apologize and Release 750K Keys",
  "author": "Brannon Morrison",
  "datePublished": "2020-05-04",
  "dateModified": "2020-05-04",
  "publisher": {
  	"@type": "Organization",
     "name": "AvantGuard Monitoring",
     "logo":{
     "@type": "ImageObject",
     "url": "https://www.agmonitoring.com/hs-fs/hubfs/Logos/AG%20Logos/AG_Full.png",
     "width": "245",
     "height": "60"
     }
  },
  "mainEntityOfPage": {
         "@type": "WebPage",
         "@id": "https://www.agmonitoring.com/blog/industry-news"
      },
  "image": {
    "@type": "ImageObject",
    "url": "https://www.agmonitoring.com/hubfs/Images/Blog%20Assets/Banner%20Images%20(Blog)/Shade%20Ransomware-Operators-Apologize-Banner.png",
    "width": 1500,
    "height": 1000
  }
}
// ]]>
```