Ransomware RAPID, a new data recovery by Databack
This month, DATABACK successfully recovered data from the Rapid ransomware. It had encrypted all the data on an EPHAD server.
Our customer entrusted us with an NEC server consisting of 4 x 300 GB hard disks organized in RAID5, forming a volume of 900 GB. This main server, which was backed up, contained the business and administrative data required for the smooth running of the institution. The ‘Rapid’ ransomware had encrypted the backups as well as the server data.
The business software provider could only observe that the backups in Acronis format (*.tib) were all unusable.
Our laboratory therefore received all the equipment for data recovery. After securing all the disks, our technicians found that the type of data encryption was known and had already been analyzed by our services.
Our proprietary tools, developed by our technical department, were able to restore access to encrypted data zones. Technicians were thus able to recover business and user data with the correct tree structure.
The Databack laboratory verified the integrity of the recovered files, enabling us to return the data to our customer quickly and efficiently.
21 March 2018