Every case is different, but the malware authors are often willing to share the decryption tools with Coveware for vetting, even before payment is negotiated fo

Every case is different, but the malware authors are often willing to share the decryption tools with Coveware for vetting, even before payment is negotiated for the keys. The hackers have no part in the decryption process. They could very well have changed something on purpose before encrypting, but they do have a reputation to uphold if they want to keep getting “customers”. At least in the high profile cases, the ransomers do seem to be honest and dependable if they are paid.