Ransomware Support

Ransomware outbreaks on corporate networks are becoming a widespread phenomenon. Once ransomware infiltrated a system, information is typically encrypted leaving the information owners without any way to access their information. The attackers generally provide a decryption key after a ransom has been paid. Even after paying the ransom, there is no guarantee that the attacker will provide the decryption key. The impact of such an attack can be devastating, especially for organisations where no disaster recovery measures are in place.

Crimson Wall helps organisations to recover from a ransomware event by using the following methodology:

1. Stop the ransomware from spreading further in the corporate network.
2. Preserve as much information as possible on systems already affected.
3. Attempt to obtain a ransomware decryption key from ransomware researchers that previously investigated cases involving the specific strain of ransomware.
4. If no key already available for the strain of ransomware, then our team will reverse-engineer the stain of ransomware on your network in an attempt to obtain a decryption key.
5. If a key can be obtained, then we’ll decrypt all encrypted data.
6. If no key could be obtained, then we’ll apply forensic techniques to recover as much data as possible.

Time is of the essence in ransomware attacks and its advisable to contact Crimson Wall the minute it becomes evident that your network is being attacked by ransomware.

Benefits:

• Stop ransomware from spreading in your networks;
• Assistance with the recovery of data after the incident;
• Implementation of measures to decrease the likeliness of future incidents.