Digital Recovery develops unique solutions for decrypting ransomware files that can be applied to companies of all sizes. We can perform recovery from anywhere in the world via remote recovery. See how we helped an Italian company recover files encrypted by a ransomware attack.
Cybercriminals often carry out mass attacks on many companies simultaneously. This gives them a higher probability of receiving the ransom value. That was probably the scenario in the following case.
The hackers’ target this time was a small accounting office in Italy.
In the middle of the week, overnight the company’s employees saw their files get a new extension, .google. They also found a ransom note on their desktop offering the key to decrypt the files for €30,000.
The company wisely ignored this ransom demand and started looking for an internal means to do the recovery. After 3 days of trying, in which the company was paralysed, they decided to put the task of recovery in the hands of qualified professionals.
It was then, that through a Google search, the company found us and immediately contacted us explaining the situation. All the physical servers and backups were hit, making all operations of the accounting office unviable for 3 days.
“There is no longer any doubt… We don’t know which access they came in through, but we were attacked by ransomware.” That’s what the company said when contacting us.
Because of the customer’s line of business, we quickly understood the importance of encrypted data that is extremely sensitive. After carrying out an advanced diagnosis, we established our mission, to completely decrypt, in a short period of time, all encrypted files. That is, 12GB of the management programme, including the data of all the firm’s clients.
The client sent us the necessary files via a secure link on Google Drive and our technical team worked hard on decrypting them. Meanwhile, our sales team provided the client with real-time information on the progress of the project. This practice brought security to the company, as they understood that their data and the future of their company were in good hands.
Within approximately 2.5 days, our experts achieved very good recovery results and we promptly scheduled a time for data homologation. This step is of utmost importance, as our priority is to deliver data that is relevant to the customer.
We created a secure environment and granted access to the company’s IT manager to assess whether the files recovered by our technical team were as expected. The client was not fooled into understanding that the future of his company was in good hands.
All files were successfully decrypted. Thus restoring full operation of the accounting office.
Without a doubt, the scenario would have been different if this company had not found us. Thanks to our technologies, we are able to help companies avoid significant financial damages, loss of authority in the market, not to mention the loss of sensitive data that should remain confidential.
Ransomware attacks are becoming an increasingly serious issue. The big question is no longer “If I’m attacked?” but “When am I attacked?” For this reason, Digital Recovery sets out to help companies get back up and running and, in turn, continue helping people.