A financial company in Kenya faced a severe ransomware incident that compromised its VMware virtual environment and paralyzed its operations for one week. The attack affected a volume exceeding 10 TB of critical data and created an extremely high-pressure situation for the client, who needed to restore business continuity as quickly as possible. The group responsible for the attack was
Data loss on magnetic tapes remains a recurring problem in companies that use backup solutions such as Backup Exec, Arcserve, Veeam and Micro Focus Data Protector. Although these software solutions are widely used in corporate environments, failures in the media, the drive, the backup catalog or the original environment itself can prevent data restoration. In many cases, the tape still
LockBit 5.0 is the latest evolution of one of the most aggressive and highly professionalised ransomware families in the world. Operated by the criminal group LockBit, this ransomware is known for highly targeted attacks, rapid execution, and strong encryption capabilities, causing a complete shutdown of operations for affected organisations. Unlike simpler variants, LockBit 5.0 uses an extremely mature Ransomware-as-a-Service (RaaS)
Digital Recovery was engaged to respond to a critical incident involving a mid-sized German automotive company whose IT infrastructure was severely compromised by a ransomware attack. All communication and case management were conducted directly with the company responsible for providing IT support to the end client. According to the initial analyses and technical reports provided by the IT support team,
Digital Recovery was engaged to respond to a critical incident involving a mid-sized company in the woodworking sector, with more than 30 employees, whose IT infrastructure was severely compromised following a ransomware attack. The attack occurred through the exploitation of a vulnerability, allowing unauthorised access to the organisation’s internal environment. Following the intrusion, the attackers deployed LockBit 5.0 ransomware, one
An Italian company specialized in workplace safety consulting and mandatory training and certification programs sought Digital Recovery’s assistance after suffering a severe Akira ransomware attack. The incident was identified on a Monday morning, when the team returned to the office and found the entire critical environment inaccessible. The VMware environment was completely unavailable, the folders stored on the NAS had
One of the leading hosting and IT infrastructure providers in Venezuela contacted Digital Recovery in a critical state after suffering a devastating .wait ransomware attack.The incident directly compromised a VMware cluster, impacting dozens of customer environments and putting the company’s entire commercial operation at risk. The situation was extremely sensitive: beyond the technical risk, there was contractual pressure, clients demanding
A company in the furniture manufacturing sector, located in Romania, contacted Digital Recovery after experiencing a complete production shutdown caused by a Lynx ransomware attack. The incident occurred over a weekend and immediately compromised the company’s entire operational environment. All central systems became unavailable, production lines were halted, and shared directories began displaying the “.lynx” extension, confirming a scenario of
Virtualization has established itself as the foundation of modern corporate infrastructure. Technologies such as VMware ESXi, Hyper-V, and XenServer allow dozens or even hundreds of virtual servers to operate on a single hypervisor, sharing computing, storage, and network resources. This architecture has brought significant gains in efficiency, scalability, and cost reduction, but it has also created a rarely discussed risk
Veeam Backup & Replication is one of the most widely used backup platforms in the corporate world. Its efficiency, flexibility, and integration with virtualized environments make the solution extremely popular among companies of all sizes. However, this popularity has also turned Veeam into one of the main targets of ransomware attacks, especially in double-extortion operations, backup destruction, and repository wiping.
We can detect, contain, eradicate, and recover data after cyber attacks.
