Ransomware Xing Team

The Xing Team Ransomware is a relatively new group, its first appearance was in 2021, it is a derivation of an old malware called Mount Locker. They have adopted the tactic of leaking the hijacked files, this data is posted on the group’s Dark web site.

This type of tactic has been applied by the vast majority of ransomware groups, leaking the files puts pressure on companies to pay the ransom as soon as possible.

The most famous Xing ransomware attack was against LineStar Integrity Services, this attack occurred around the same time as the highly publicized Colonial Pipeline attack. As a result of this attack, the entire gasoline supply in the eastern United States was crippled, this attack was done by the Darkside ransomware. Unlike this attack, the attack on LineStar was not publicized, the leak was only disclosed by the group DDoSecrets that defends the transparency of companies, they discovered the leak of the files and posted on their website.

This is a clear example of how companies don’t want attacks to be leaked to the media.

It is not known for sure if LineStar paid the ransom to the criminals.

Recover files encrypted by Xing Team ransomware

We at Digital Recovery are able to recover files encrypted by any ransomware extension, whether for individuals or businesses. No matter which device is affected, we can recover them all.

We know how disastrous it is for a business to be attacked by ransomware, we constantly work towards the evolution of our services so that there is always hope for businesses and individuals who have had their files encrypted.

Our solutions are exclusive and are customised to best suit the needs of each client.

Throughout the process the client will be accompanied by a specialist, who will explain what will be done at each stage of recovery.

Information security is vital to us, so all our processes are in accordance with the European General Data Protection Regulation (GDPR), and in addition, we also have the confidentiality agreement (NDA).

In cases where sending the device to our lab is not possible, we can perform the recovery remotely.

Digital Recovery is ahead of other companies in the market when it comes to recovering files encrypted by ransomware. See what we can do for you and your business.

We are always online

Please fill out the form, or select your preferred contact method. We will contact you to start recovering your files.

Latest insights from our experts

Descriptografar ransomware em servidores

Decrypt Server

Ransomware attacks on servers have become a growing threat, compromising the security of critical data and business operations. This article explores the nuances of file


Through unique technologies Digital Recovery can bring back encrypted data on any storage device, offering remote solutions anywhere in the world.