Cybercriminals often carry out mass attacks on many companies simultaneously. This gives them a higher probability of receiving the ransom amount. This was probably the scenario in the following case.
The target of the hackers this time was a small accounting office in Italy.
In the middle of a week, overnight the company’s employees saw their files get a new extension, .google. They also found a ransom note on their desktop offering the key to decrypt the files for 30,000 Euros.
The company wisely ignored this ransom demand and started looking for an internal means of recovery. After 3 days of trying, in which the company was paralyzed, they decided to put the task of recovery in the hands of qualified professionals.
It was then, through a Google search, that the company found us and immediately contacted us explaining the situation. All the physical servers and backups were affected, making it impossible for the accounting firm to operate for three days.
“There is no longer any doubt… We don’t know which access they got in through, but we were attacked by ransomware.” That’s what the company said when they contacted us.
Based on the client’s industry, we quickly understood the importance of encrypted data that is extremely confidential. After carrying out advanced diagnostics, we set ourselves the mission of completely decrypting all encrypted files in a short period of time. In other words, 12 GB of management software, including the data of all the company’s clients.
The client sent us the necessary files via a secure Google Drive link, and our technical team took care of the recovery. Meanwhile, our sales team provided the client with real-time information on the progress of the project. This practice brought security to the company, as they understood that their data and the future of their company were in safe hands.
After approximately two and a half days, our experts obtained very good recovery results and, without delay, we booked an appointment to homologate the data. This stage is extremely important, as our priority is to provide the client with relevant data.
We created a secure environment and gave access to the company’s IT manager to evaluate whether the data recovered by our technical team was as expected. The customer really made no mistake in understanding that the future of his company was in good hands.
All the files were successfully decrypted. Thus, the accounting office was restored to full operation.
Without a doubt, the scenario would have been different if this company had not found us. Thanks to our technologies, we are able to help companies avoid major financial damage, loss of authority in the marketplace, not to mention the loss of sensitive data that should remain confidential.
Ransomware attacks are becoming an increasingly serious issue. The big question is no longer “If I am attacked?” but rather, “When am I attacked?” For this reason, the Digital Recovery group, through RansomHuter, is willing to help companies get back up and running and, in turn, continue helping people.
