Digital Recovery develops unique solutions for decrypting ransomware files that can be applied to companies of all sizes. We can perform recovery from anywhere in the world via remote recovery. See how we helped an Italian company recover files encrypted by a ransomware attack.
Cybercriminals often carry out mass attacks on many companies simultaneously. This gives them a higher probability of receiving the ransom value. This was probably the scenario in the following case.
The target of the hackers this time was a small accounting office in Italy.
In the middle of a week, overnight the company’s employees saw their files get a new extension, .google. They also found in their environment a ransom note offering the key to decrypt the files worth €30,000.
The company wisely ignored this ransom demand and started looking for an internal means to do the recovery. After 3 days of trying, in which the company was paralyzed, they decided to put the task of recovery in the hands of qualified professionals.
It was then, through a Google search, that the company found us and immediately contacted us explaining the situation. All physical servers and backups were hit, making all operations of the accounting office impossible for 3 days.
“There is no longer any doubt… We don’t know which access they came in through, but we were attacked by ransomware.” That’s what the company said when contacting us.
Because of the customer’s line of business, we quickly understood the importance of encrypted data that is extremely sensitive. After conducting an advanced diagnostic, we established our mission, to completely decrypt, in a short period of time, all encrypted files. That is, 12GB of the management program, including the data of all the office’s clients.
The client sent us the necessary files via a secure link on Google Drive and our technical team worked hard on decrypting them. Meanwhile, our sales team was taking real-time information to the customer about the progress of the project. This practice brought security to the company, as they understood that their data and the future of their company were in good hands.
Within approximately 2.5 days, our experts achieved very good recovery results and we scheduled a time for data homologation without delay. This step is of utmost importance, because our priority is to deliver data that is relevant to the customer.
We created a secure environment and granted access to the company’s IT manager to assess whether the files recovered by our technical team were as expected. The client really made no mistake in understanding that the future of his company was in good hands.
All files were successfully decrypted. Thus restoring the accounting office to full operation.
Without a doubt, the scenario would have been different if this company had not found us. Thanks to our technologies, we are able to help companies avoid major financial damage, loss of authority in the marketplace, not to mention the loss of sensitive data that should remain confidential.
Ransomware attacks are becoming an increasingly serious issue. The big question is no longer “If I am attacked?” but “When am I attacked?” For this reason, Digital Recovery is willing to help companies get back on their feet and, in turn, continue helping people.