System and method for decrypting files

摘要

In accordance with particular embodiments, a computer-implemented method for execution by one or more processors includes intercepting a communication comprising a message. The method also includes identifying words from within the message. The method further includes storing in a dictionary words from within the message of the communication and one or more parameters of the communication for each of the words. The dictionary comprises a plurality of words from a plurality of intercepted text-based communications. The method also includes receiving an encrypted file that is configured to be decrypted using a password. The method additionally includes identifying words from the dictionary to be used to attempt to decrypt the encrypted file. The identified words are identified based on at least one parameter associated with the encrypted file and the one or more parameters stored in the dictionary. The method further includes attempting to decrypt the encrypted file using at least a portion of the identified words from the dictionary as the password for decrypting the encrypted attachment.

主权项

1. A computer-implemented method for execution by one or more processors, the method comprising:
intercepting at least one first communication comprising a first message and an associated first encrypted file, wherein the first encrypted file is configured to be decrypted using a password; parsing the first message to identify one or more words from within the first message; creating a dictionary for words to use to decrypt the first encrypted file; storing in the dictionary the one or more identified words parsed from within the first message of the first communication, the dictionary comprising a plurality of words from a plurality of intercepted communications; storing in the dictionary meta data associated with parameters associated with the first communication from which the one or more words identified by parsing the first message and stored in the dictionary; using the meta data to prioritize the words stored in the dictionary; identifying one or more of the prioritized words from the dictionary to be used to decrypt the first encrypted file; and applying the one or more of the prioritized words identified from the dictionary to decrypt the first encrypted file using at least a portion of the one or more prioritized words identified from the dictionary as the password for decrypting the first encrypted file.