RansomHunter is an American division of Digital Recovery Group, focussing on decrypting ransomware files.
We received a case of the REvil Sodinokibi ransomware attack. At the time, the group was among the largest and most effective ransomware in the world. The group's attacks always targeted large corporations, and in this case it was no different...
“Second time I count on the agility and professionalism of the Digital Recovery team, they are very experienced and responsive. I recommend them to everyone”.
“The quality of the service is excellent. The attention given to the service is gratifying and the feedback that is given gives us peace of mind knowing that we can trust the work and dedication.”
We received a case of REvil Sodinokibi ransomware attack, at the time the group was among the largest and most effective ransomware in the world, the group’s attacks were always targeted at large corporations, and in this case it was no different.
It is possible to recover data after a Lockbit 2.0 Ransomware attack. We did it and this is how it happened. We received a call from a company that said it had suffered an attack and was unable to continue its activities. When they arrived at their offices just after the weekend, they realised that much of their data was inaccessible. The situation was as follows: More than 10 virtual machines, all hosted on Windows Server, which no longer booted due to malware in the environment, which prevented the company from functioning. After hacking into the environment, the Lockbit hacking group demanded a ransom of
Soon after a new wave of LockBit 2.0 ransomware attacks, many companies saw their business come to a standstill because of data locked up by encryption. Here is a case of decryption for one of them.
One of the largest river logistics companies in Latin America contacted us to recover data after a Quantum Ransomware attack. There has been a wave of attacks by the Quantum group targeting several different companies. Small, medium and large companies were attacked. In this case, a large river logistics company in Argentina was the victim. The hackers probably found a loophole in the system via emails sent to employees. Once the malware had been inserted into the environment, the criminals managed to encrypt the data with the Quantum extension. They then set a ransom of $100,000. Paying the amount requested by the hackers was not
RansomHunter develops unique solutions to decrypt ransomware files, which can be applied to companies of all sizes. We can perform recovery from anywhere in the world via remote recovery. See how we helped an Italian company recover files encrypted by a ransomware attack. Cybercriminals often carry out mass attacks on many companies simultaneously. This gives them a higher probability of receiving the ransom amount. This was probably the scenario in the following case. The target of the hackers this time was a small accounting office in Italy. In the middle of a week, overnight the company’s employees saw their files get a new extension, .google.