Trusted byContent-CriticalBusinesses

RansomHunter is an American division of Digital Recovery Group, focussing on decrypting ransomware files.

How we Saved a Power Company from Extortion by the REvil Sodinokibi Ransomware

We received a case of the REvil Sodinokibi ransomware attack. At the time, the group was among the largest and most effective ransomware in the world. The group's attacks always targeted large corporations, and in this case it was no different...

“Second time I count on the agility and professionalism of the Digital Recovery team, they are very experienced and responsive. I recommend them to everyone”.

João Schmidt • CEO • Platz • Client Since 2016

“The quality of the service is excellent. The attention given to the service is gratifying and the feedback that is given gives us peace of mind knowing that we can trust the work and dedication.”

Adauto Santos • Server Analyst • Kroton • Client Since 2017

🇫🇷 How we saved a company from a Lockbit 2.0 Ransomware attack

It is possible to recover data after a Lockbit 2.0 Ransomware attack. We did it and this is how it happened. We received a call from a company that said it had suffered an attack and was unable to continue its activities. When they arrived at their offices just after the weekend, they realised that much of their data was inaccessible. The situation was as follows: More than 10 virtual machines, all hosted on Windows Server, which no longer booted due to malware in the environment, which prevented the company from functioning. After hacking into the environment, the Lockbit hacking group demanded a ransom of

Complete case

🇦🇷 Ransomware Attack on One of the Largest River Logistics Companies in Latin America

One of the largest river logistics companies in Latin America contacted us to recover data after a Quantum Ransomware attack. There has been a wave of attacks by the Quantum group targeting several different companies. Small, medium and large companies were attacked. In this case, a large river logistics company in Argentina was the victim. The hackers probably found a loophole in the system via emails sent to employees. Once the malware had been inserted into the environment, the criminals managed to encrypt the data with the Quantum extension. They then set a ransom of $100,000. Paying the amount requested by the hackers was not

Complete case

🇮🇹 See how we Decrypt Files Affected by .google Ransomware

RansomHunter develops unique solutions to decrypt ransomware files, which can be applied to companies of all sizes. We can perform recovery from anywhere in the world via remote recovery. See how we helped an Italian company recover files encrypted by a ransomware attack. Cybercriminals often carry out mass attacks on many companies simultaneously. This gives them a higher probability of receiving the ransom amount. This was probably the scenario in the following case. The target of the hackers this time was a small accounting office in Italy. In the middle of a week, overnight the company’s employees saw their files get a new extension, .google.

Complete case
To ensure a better experience on our site, by continuing browsing, you agree to the use of cookies in accordance with our privacy policy.