🇧🇷 How we saved an electricity company from the extortion of the REvil Sodinokibi ransomware

We received a case of the REvil Sodinokibi ransomware attack. At the time, the group was among the largest and most effective ransomware in the world. The group’s attacks always targeted large corporations, and in this case it was no different.

Need Help?

Let Us Manage Your Ransomware Recovery

The attack occurred over a weekend, in fact, the ransomware had been on the company’s system for some time, the ransomware managed to hit 100 Virtual Machines that were hosted on a Windows X86 server.

This was a large-scale attack aimed specifically at the company. REvil used an RDP port, which is a port for remote access. The company’s operations were not totally affected, as the main servers were not hit by the attack, the servers that were hit were the secondary servers.

The ransom demanded by the group was 2 million reais, which the company refused to pay and began searching for an alternative solution to the payment and, among the solutions found, RansomHunter stood out from the rest for its differentials and its free advanced diagnostics, which could completely map the encrypted data.

Soon after the advanced diagnosis, with the company’s endorsement, we immediately started the recovery. This case was extremely complex, what would normally be done in up to 10 days, was done in 30 days due to the high volume of encrypted data that was stored in different Virtual Machines.

But not even this complexity could stop our experts, who worked tirelessly to recover the files, using the help of Trace, a proprietary technology, without which the recovery would have taken months. After the process, 100% of the encrypted data was recovered.

This is just one case of the hundreds we have handled, and we have satisfied customers all over the world.

Trusted by Content-Critical Businesses Worldwide

🇧🇷 How we Saved a Power Company from Extortion by the REvil Sodinokibi Ransomware

We received a case of REvil Sodinokibi ransomware attack, at the time the group was among the largest and most effective ransomware in the world, the group’s attacks were always targeted at large corporations, and in this case it was no different.

🇫🇷 How we saved a company from a Lockbit 2.0 Ransomware attack

It is possible to recover data after a Lockbit 2.0 Ransomware attack. We did it and this is how it happened. We received a call from a company that said

🇫🇷 We decrypted over 1.5TB of data after a LockBit 2.0 Ransomware attack

Soon after a new wave of LockBit 2.0 ransomware attacks, many companies saw their business come to a standstill because of data locked up by encryption. Here is a case of decryption for one of them.