Haron ransomware is relatively new, along with Blackmatter ransomware and AvosLocker it has been vying for the spot left by REvil Sodinokibi and Darkside and especially Avaddon ransomware which seems to be Haron’s direct predecessor.
The Haron group follows a “good manners” norm, they restrict attacks to specific sectors such as:
- Hospitals.
- Critical infrastructure facilities (nuclear power plants, power plants, water treatment facilities).
- Oil and gas industry (pipelines, oil refineries)
- Defense industry
- Non-profit companies
- Government sector
If any of these sectors are attacked, the group says it will give away the decryption key for free, this is the same mode of operation as the BlackMatter ransomware.
The group works with RaaS (Ransomware as a Service) tactics, which is the outsourcing of attacks. In numerous Darkweb forums the group appears selling its services in exchange for a commission on the ransom value.
The Haron ransomware attacks are focused on the Windows operating system. Most antivirus software cannot identify the presence of the ransomware after a break-in, because the ransomware is hardly noticeable.
Haron’s encryption is so powerful that even after removing the virus the data can remain encrypted. And should this happen, recovery of the encrypted data will be necessary.
Recovery of Data Encrypted by Haron Ransomware
Encrypted data recovery can only be done by a highly capable company that has the tools and technologies to do this job. And, few companies are capable of doing this service.
Among these few companies is Digital Recovery, which has been in the data recovery market for more than two decades. It was able to develop technologies that innovated the recovery of data encrypted by ransomware on any device, whether: RAID systems, Storage, Database, Servers, Virtual Machines and others. This ability to develop technologies has put us at the forefront of encrypted file recovery.
Because we know that we deal with data that can be sensitive for companies, we provide all of our clients with a confidentiality agreement (NDA) as a guarantee that nothing about the process will be disclosed.
All our processes are in accordance with the General Law on Data Protection (GDPR).
During the entire process, the client is accompanied by a specialist who can clarify any questions about the process.
Contact us and see what we can do for your data.
