BlockZ ransomware has been extremely consistent in its recent attacks, with countless victims emerging with files encrypted by the group.
The group acts mainly with spam and phishing email campaigns, this campaign consists of sending numerous emails with important messages such as from banks, post offices, etc. Requesting the user to download a document to analyse the terms and in that document is contained the malware.
The ransomware does not manifest itself immediately, on the contrary, it hides in the victim’s system and disables the system defences such as antivirus, firewalls and others.
After disabling any program that could counter the encryption process, the ransomware completely maps the most important files such as PDFs, spreadsheets, documents, photos, etc.
After that it immediately starts encrypting the files, this can take some time, all affected files receive the extension .blockZ and are unable to be opened or changed.
After the end of the process a document is generated with the ransom term, called ‘How To Restore Your Files.txt’.
The group charges high amounts to release the key to decrypt the files, the amount must be paid in cryptocurrencies and may vary according to the victim and the volume of encrypted data.
It is worth remembering that criminals do not give any guarantee that the decryption key will be even released after the payment of the ransom, there are numerous cases in which the victim made the payment and continued with the encrypted files.
In view of this, it is vital to know an alternative to payment, this alternative is the recovery of encrypted data made by Digital Recovery.
Digital Recovery works in data recovery for over 23 years, we specialize in the recovery of files encrypted by ransomware on any storage device.
We can recover data from databases, storages, RAID systems, virtual machines, servers and more. Our experts have developed exclusive technologies for this purpose.
All our processes are proprietary and can be performed anywhere in the world via remote recovery. We have helped companies all over the world to not give in to the pressure of criminals and get back to normal operation without any interference from ransomware.
We have certainly helped our clients save thousands of dollars by not paying the ransom demanded by the criminals. All our projects are protected by the confidentiality agreement (NDA).
All our processes are in accordance with the General Data Protection Regulation (GDPR) so that the client is safe and protected by current laws.
Contact our experts and start recovering encrypted files right now.