Due to the alarming growth of Petya ransomware attacks, we specialize in ransomware decryption
250+ ratings and testimonials
Digital Recovery has been in the data recovery market for over two decades, and during all those years, recovering ransomware has challenged us the most.
Despite the great difficulty in recovering encrypted data, our engineering department has advanced without looking back and we have achieved great and expressive results for our customers. This advancement has allowed us to help our customers save millions of dollars.
Chainalysis (a company that helps government agencies, cryptocurrency businesses, and financial institutions confidently engage with cryptocurrency) did a survey that showed a staggering increase in ransom requests for files encrypted by ransomware, a 300% increase. This research shows how groups have become even more lethal in their attacks.
With hundreds of ransomware operating in the market and every day new and more advanced versions appear, we can classify Ransomware into the following types:
Encrypts the files and prevents them from being opened. Although the files are blocked, it is possible for the user to boot up the operating system and see the encrypted files.
If your project had a negative diagnosis or the execution time does not meet your expectations, we accept the challenge of analysing your case.
We are a company specialized in data recovery, you can count on us to recover files encrypted by Petya ransomware. We have a specialized division that can work in a dedicated 24x7x365 mode to handle complex cyber attack cases.
Recovering Petya ransomware is possible because we have developed hardware and software technologies that are capable of it. The ability to develop unique technologies puts us at a level that few data recovery companies in the world have achieved so far.
The technology that brings the most results in the recovery of data encrypted by ransomware is called Tracer. It is capable of reconstructing data encrypted by any ransomware extension, without the need for decryption key and decoder. This increases our chances of recovering data on Virtual Machines, Databases, RAID systems to almost 100%.
In addition to providing services to governments, financial institutions and small, medium and large companies, Digital Recovery also provides services to other companies that also operate in the area of data recovery.
If there is no possibility of sending the affected device to our laboratory, we can do the recovery remotely, anywhere in the world.
We know that a ransomware attack is harmful to the company’s image, so we provide our customers with a confidentiality agreement (NDA) so that there is security on the part of the customer that no information will be disclosed.
Being fully aware of the levels of pressure and urgency that exist in data center and cloud computing environments, we also offer a 24x7x365 standby service. This type of service provides our customers with the ability to perform services 24 hours a day, 7 days a week, 365 days a year.
There is still hope for your lost data, our entire team is at your company's disposal.
With each passing day ransomware attacks are perfected. After a successful attack attempt, ransomware quickly maps the user’s most important files to begin encryption. Microsoft Office files, databases, PDFs, and designs are among their top targets.
Very often yes. Typically, the attack happens through loopholes given by malicious applications that were downloaded from the Web. Another very common way is through incoming e-mails with attachments or links to sites strategically designed to harm users. Your computer can become vulnerable by the simple fact of opening the attachment or clicking on the malicious link.
Hackers often leave threatening messages on affected machines and servers. However, if the data is not important or if you have a backup, if you format your computer and take care not to get hacked again, nothing will happen. There is a new type of computer attack where criminals steal your information and if you don’t pay the ransom, they threaten to spread your information across the Internet and the Deep Web.
A simplistic answer would not be able to explain this matter. But let’s just cover a few topics on the subject below. Without a doubt, the ideal is to hire a consultant or professional specialized in the cybersecurity field.
Just as in a grand theft there is a high level of planning, so too in a cyber attack.
For a thief to enter a house, someone needs to leave a breach open or he needs to find a way around the alarm systems. Likewise, a cyber criminal will try to get a partner to enter your computer to open the door for him to enter. These partners may be programs of dubious provenance downloaded from the Web or sent via email. If he can’t infiltrate these through these “accomplices”, the job will be much more difficult.
Once the program is installed on the user’s machine, the user is responsible for opening the door and informing the hacker that he has a machine available for hacking. Once this is done, the data encryption process begins.
After attacking the machine, the ransomware can easily spread to infect machines on the network, targeting mainly servers. If the servers are hacked the entire company will be affected.
Of course, holidays and vacations are the main periods for cyber attacks. On these days the surveillance is less effective and as fewer people are working in the company, it is more difficult to notice suspicious movements.
In 2020 alone it is estimated that payments of more than 500 million dollars occurred for ransomware attack cases.
In 29% of cases, the invasion happens by downloading an infected program or file or clicking on a hacked link. Next, with 21% of cases, is the attack via RDP [Remote Desktop Protocol], which is a means of remote access to Windows machines.
It is called Ragnar Locker, this technique uses Windows Virtual Machine system to invade othe machines and servers, encrypt databases and all sort of files in the victim’s environment.
High consumption of processing, memory, and disk access are suspicious behaviors that need to be investigated thoroughly in order to assess whether an attack is underway.
As in 65% of the attacks that occurred in 2020 involved cloud data, we can see from the numbers, that the risk still remains in evidence, even though all data is in the cloud [Amazon and Microsoft].
In 15% of the attacks that occurred in 2020, administrators were able to stop the propagation process even after the intrusion was successful, thus preventing further damage to the environment.
There are a few options on the market and usually the key words “digital risk protection” appear in the product name. Due to the high number of cyber attacks, in some countries such as France, insurers are removing ransomware from insurance coverage.