Coveware: Ransomware Recovery First Responders
Cart 0
Blog Quarterly Reports
Report an attack
Ransomware Incident Response Retained Services Unidecrypt Recon - Forensic Triage
About Us Press Industry News
Cart 0
Products & Services Ransomware Incident Response Retained Services Unidecrypt Recon - Forensic Triage About About Us Press Industry News Blog Quarterly Reports
Coveware: Ransomware Recovery First Responders
Report an attack
 
Ransomware Blog

Ransomware Recovery Blog

The Coveware team prides itself on keeping up-to-date, 24/7 with every aspect of ransomware and its possible threat to your business.

If you need immediate help with a specific ransomware strain, or are curious about the threat landscape of your industry, then let us know.

Learn more →
 
 
 
Decrypt GandCrab Ransomware. How to Recover GandCrab Encrypted Files
Decrypt GandCrab Ransomware. How to Recover GandCrab Encrypted Files

A step by step DIY guide of how to decrypt GandCrab ransomware encrypted files. This guide will help restore encrypted files.

Read More
Bill SiegelMay 8, 2019
Ransomware First Response Guide - What to do in the ‘Oh $#@t’ moment
Ransomware First Response Guide - What to do in the ‘Oh $#@t’ moment

A guide for companies on how to handle the first few minutes and hours after a ransomware attack is discovered.

Read More
Bill SiegelMay 2, 2019
How To Prevent Business Email Compromise and Wire Fraud
How To Prevent Business Email Compromise and Wire Fraud

This guide to preventing business email compromise will help keep your organization safe from the most prevalent form of cyber theft

Read More
Bill SiegelApril 25, 2019
Ransom amounts rise 90% in Q1 as Ryuk increases
Ransom amounts rise 90% in Q1 as Ryuk increases

Q1 2019 Ransomware Marketplace report aggregates statistics such as ransom demands, data recovery rates and attack vectors from ransomware attacks

Read More
Bill SiegelApril 16, 2019Quarterly Report
Decrypt Ryuk Ransomware. How to Recover Ryuk Encrypted Files
Decrypt Ryuk Ransomware. How to Recover Ryuk Encrypted Files

A step by step guide of how to decrypt Ryuk ransomware encrypted files. This guide will help remove the virus and restore encrypted files.

Read More
Bill SiegelApril 11, 2019
How to Save Ransomware Encrypted Files for Decryption
How to Save Ransomware Encrypted Files for Decryption

Learn how to properly preserve your ransomware encrypted files so that you can make a full recovery if a free decryption tool is published.

Read More
Bill SiegelApril 10, 2019
Ransomware Attackers turn to Google Ads after Dream Market Take Down
Ransomware Attackers turn to Google Ads after Dream Market Take Down

The Dream Market take down forced ransomware distributors to get creative in order to salvage active cyber extortions, after email addresses got abandoned.

Read More
Bill SiegelMarch 29, 2019
Dharma ransomware recovery rates fall as ransom demands skyrocket
Dharma ransomware recovery rates fall as ransom demands skyrocket

Dharma Ransomware is increasingly falling into the hands of less sophisticated threat actor groups. This has led to decreased recovery rates for victims.

Read More
Bill SiegelMarch 21, 2019
Cr1ptT0r Ransomware Targets NAS Devices with Old Firmware
Cr1ptT0r Ransomware Targets NAS Devices with Old Firmware

Cr1ptT0r ransomware is targeting unsupported firmware on internet connected NAS devices. Read how to decrypt Cr1ptT0r. Contact us for immediate help.

Read More
Alex HoldtmanMarch 13, 2019
Ryuk Ransomware, Exploring the Technical and Human Connections
Ryuk Ransomware, Exploring the Technical and Human Connections

Coveware teamed up with McAfee ATR to analyze both technical and non-technical aspects of Ryuk Ransomware attacks.

Read More
Bill SiegelFebruary 20, 2019
Ransomware attack on MSPs exploits popular PSA/RMM Tool
Ransomware attack on MSPs exploits popular PSA/RMM Tool

Managed Service Providers have been attacked by ransomware that exploits their PSA/RMM tools and spreads GandCrab Ransomware.

Read More
Bill SiegelFebruary 13, 2019
GandCrab v5.1 Exploit Kit Distribution and TOR Site Features
GandCrab v5.1 Exploit Kit Distribution and TOR Site Features

A Coveware™ guide on the new ways GandCrab v5.1 ransomware attacks, how to use the decryption tool, and recover your data.

Read More
RemovalBill SiegelFebruary 5, 2019
xDedic - Marketplace for Hacked RDP Credentials is Taken Down
xDedic - Marketplace for Hacked RDP Credentials is Taken Down

In a coordinated action, international law enforcement agencies took down xDedic, a marketplace for buying and selling hacked RDP and server credentials. Read about how this take down will affect ransomware attacks in the future.

Read More
Bill SiegelJanuary 29, 2019
Coveware's 2018 Q4 Ransomware Marketplace Report
Coveware's 2018 Q4 Ransomware Marketplace Report

Coveware’s Q4 Global Ransomware Marketplace Report presents aggregated data points collected from cases handled during Q4 2018 to highlight observable trends. Learn more about the latest trends in ransomware.

Read More
Ransomware NewsAlex HoldtmanJanuary 22, 2019Quarterly Report
Phobos Ransomware, A Combo of CrySiS and Dharma
Phobos Ransomware, A Combo of CrySiS and Dharma

New Phobos Ransomware is being distributed by an active Dharma crew. The attacks target RDP and use similar extortion tactics on victims.  Learn more about this new threat.

Read More
Bill SiegelJanuary 18, 2019
What Is SamSam Ransomware and How to Recover and Remove It [Guide]
What Is SamSam Ransomware and How to Recover and Remove It [Guide]

Remove & Recover from SamSam ransomware ASAP. Protect your business and recover your files. Contact Coveware™ for a free consultation right now.

Read More
Bill SiegelJanuary 14, 2019
Don’t Become a Ransomware Target - Secure Your RDP Access Responsibly
Don’t Become a Ransomware Target - Secure Your RDP Access Responsibly

Ransomware attacks via remote access are on the rise. Secure RDP now to protect your business. Coveware shares insights from helping ransomware victims.

Read More
Bill SiegelJanuary 8, 2019
CryptoMix Ransomware Exploits Child Cancer Crowdfunding
CryptoMix Ransomware Exploits Child Cancer Crowdfunding

A recent CryptoMix Ransomware campaign is exploiting real crowdfunding sites set up to benefit children’s cancer treatment.

Read More
Bill SiegelJanuary 7, 2019
Ransomware, Hackers, and … Guarantees?
Ransomware, Hackers, and … Guarantees?

How use of ‘guarantee’ psychology impacts how companies recover from a ransomware attack.

Read More
Bill SiegelJanuary 3, 2019
Coveware Joins ‘No More Ransom’ Partner Organization
Coveware Joins ‘No More Ransom’ Partner Organization

Coveware has joined the No More Ransom Organization along with other Cyber Security Companies and Law Enforcement Agencies. Learn how No More Ransom is making a difference!

Read More
Ransomware NewsBill SiegelDecember 20, 2018
Newer Older
Hours
What We Do
Ransomware Incident Response Ransomware Analytics Retained Services
Industry News
Ransomware By Industry Coveware Blog Press
Who We Are
About Contact Us Careers
Legal
Privacy Policy Terms of Service
 

PO Box 621 - 275 Post Road E STE 10 - Westport CT, 06881 Copyright 2025 Coveware, Inc. All Rights Reserved.