Coveware: Ransomware Recovery First Responders
Cart 0
Blog Quarterly Reports
Report an attack
Ransomware Incident Response Retained Services Unidecrypt Recon - Forensic Triage
About Us Press Industry News
Cart 0
Products & Services Ransomware Incident Response Retained Services Unidecrypt Recon - Forensic Triage About About Us Press Industry News Blog Quarterly Reports
Coveware: Ransomware Recovery First Responders
Report an attack
 
Ransomware Blog

Ransomware Recovery Blog

The Coveware team prides itself on keeping up-to-date, 24/7 with every aspect of ransomware and its possible threat to your business.

If you need immediate help with a specific ransomware strain, or are curious about the threat landscape of your industry, then let us know.

Learn more →
 
 
 
Ransomware Sentiment After a Summer of Headlines
Ransomware Sentiment After a Summer of Headlines

Ransomware and media coverage of ransomware ran rampant over the summer of 2019. We break down prevailing sentiment with our views.

Read More
Bill SiegelOctober 8, 2019
A Consumer’s Guide to Protecting Important Data From Ransomware
A Consumer’s Guide to Protecting Important Data From Ransomware

A guide for consumers that will help prevent data loss from ransomware or other threats. Follow this guide to ensure your data is preserved!

Read More
Bill SiegelAugust 30, 2019
Ransomware Amounts Rise 3x in Q2 as Ryuk & Sodinokibi Spread
Ransomware Amounts Rise 3x in Q2 as Ryuk & Sodinokibi Spread

Coveware’s Q2 2019 Ransomware Marketplace report aggregates statistics such as cyber extortion demands, ransomware data recovery rates, and network attack vectors from ransomware attacks.

Read More
Bill SiegelJuly 16, 2019Quarterly Report
Sodinokibi Ransomware Poised to Impact Larger Enterprises
Sodinokibi Ransomware Poised to Impact Larger Enterprises

Sodinokibi Ransomware borrows TOR site features of GandCrab, and the large demands of Ryuk. Read our review to understand this new threat.

Read More
Bill SiegelMay 23, 2019
Sunlight for the Ransomware Data Recovery Industry
Sunlight for the Ransomware Data Recovery Industry

Dishonest data recovery firms are under scrutiny after recent reports exposed some deceptive business practices.

Read More
Bill SiegelMay 15, 2019
Decrypt GandCrab Ransomware. How to Recover GandCrab Encrypted Files
Decrypt GandCrab Ransomware. How to Recover GandCrab Encrypted Files

A step by step DIY guide of how to decrypt GandCrab ransomware encrypted files. This guide will help restore encrypted files.

Read More
Bill SiegelMay 8, 2019
Ransomware First Response Guide - What to do in the ‘Oh $#@t’ moment
Ransomware First Response Guide - What to do in the ‘Oh $#@t’ moment

A guide for companies on how to handle the first few minutes and hours after a ransomware attack is discovered.

Read More
Bill SiegelMay 2, 2019
How To Prevent Business Email Compromise and Wire Fraud
How To Prevent Business Email Compromise and Wire Fraud

This guide to preventing business email compromise will help keep your organization safe from the most prevalent form of cyber theft

Read More
Bill SiegelApril 25, 2019
Ransom amounts rise 90% in Q1 as Ryuk increases
Ransom amounts rise 90% in Q1 as Ryuk increases

Q1 2019 Ransomware Marketplace report aggregates statistics such as ransom demands, data recovery rates and attack vectors from ransomware attacks

Read More
Bill SiegelApril 16, 2019Quarterly Report
Decrypt Ryuk Ransomware. How to Recover Ryuk Encrypted Files
Decrypt Ryuk Ransomware. How to Recover Ryuk Encrypted Files

A step by step guide of how to decrypt Ryuk ransomware encrypted files. This guide will help remove the virus and restore encrypted files.

Read More
Bill SiegelApril 11, 2019
How to Save Ransomware Encrypted Files for Decryption
How to Save Ransomware Encrypted Files for Decryption

Learn how to properly preserve your ransomware encrypted files so that you can make a full recovery if a free decryption tool is published.

Read More
Bill SiegelApril 10, 2019
Ransomware Attackers turn to Google Ads after Dream Market Take Down
Ransomware Attackers turn to Google Ads after Dream Market Take Down

The Dream Market take down forced ransomware distributors to get creative in order to salvage active cyber extortions, after email addresses got abandoned.

Read More
Bill SiegelMarch 29, 2019
Dharma ransomware recovery rates fall as ransom demands skyrocket
Dharma ransomware recovery rates fall as ransom demands skyrocket

Dharma Ransomware is increasingly falling into the hands of less sophisticated threat actor groups. This has led to decreased recovery rates for victims.

Read More
Bill SiegelMarch 21, 2019
Cr1ptT0r Ransomware Targets NAS Devices with Old Firmware
Cr1ptT0r Ransomware Targets NAS Devices with Old Firmware

Cr1ptT0r ransomware is targeting unsupported firmware on internet connected NAS devices. Read how to decrypt Cr1ptT0r. Contact us for immediate help.

Read More
Alex HoldtmanMarch 13, 2019
Ryuk Ransomware, Exploring the Technical and Human Connections
Ryuk Ransomware, Exploring the Technical and Human Connections

Coveware teamed up with McAfee ATR to analyze both technical and non-technical aspects of Ryuk Ransomware attacks.

Read More
Bill SiegelFebruary 20, 2019
Ransomware attack on MSPs exploits popular PSA/RMM Tool
Ransomware attack on MSPs exploits popular PSA/RMM Tool

Managed Service Providers have been attacked by ransomware that exploits their PSA/RMM tools and spreads GandCrab Ransomware.

Read More
Bill SiegelFebruary 13, 2019
GandCrab v5.1 Exploit Kit Distribution and TOR Site Features
GandCrab v5.1 Exploit Kit Distribution and TOR Site Features

A Coveware™ guide on the new ways GandCrab v5.1 ransomware attacks, how to use the decryption tool, and recover your data.

Read More
RemovalBill SiegelFebruary 5, 2019
xDedic - Marketplace for Hacked RDP Credentials is Taken Down
xDedic - Marketplace for Hacked RDP Credentials is Taken Down

In a coordinated action, international law enforcement agencies took down xDedic, a marketplace for buying and selling hacked RDP and server credentials. Read about how this take down will affect ransomware attacks in the future.

Read More
Bill SiegelJanuary 29, 2019
Coveware's 2018 Q4 Ransomware Marketplace Report
Coveware's 2018 Q4 Ransomware Marketplace Report

Coveware’s Q4 Global Ransomware Marketplace Report presents aggregated data points collected from cases handled during Q4 2018 to highlight observable trends. Learn more about the latest trends in ransomware.

Read More
Ransomware NewsAlex HoldtmanJanuary 22, 2019Quarterly Report
Phobos Ransomware, A Combo of CrySiS and Dharma
Phobos Ransomware, A Combo of CrySiS and Dharma

New Phobos Ransomware is being distributed by an active Dharma crew. The attacks target RDP and use similar extortion tactics on victims.  Learn more about this new threat.

Read More
Bill SiegelJanuary 18, 2019
Newer Older
Hours
What We Do
Ransomware Incident Response Ransomware Analytics Retained Services
Industry News
Ransomware By Industry Coveware Blog Press
Who We Are
About Contact Us Careers
Legal
Privacy Policy Terms of Service
 

PO Box 621 - 275 Post Road E STE 10 - Westport CT, 06881 Copyright 2025 Coveware, Inc. All Rights Reserved.