IT Professional with 25+ years of work experience. Editor-in-chief @ Digital 4N6 Journal, Founder director @ Council of Information Security.
Udaipur (Rajasthan)
Joined December 2009
- Tweets2.4K
- Following391
- Followers552
- Likes585
Saw @ExideCare claiming to be number 1 brand. Bought 16 batteries with 2 years warranty. 11 of them went down in just 3 months and they agree to replace only 3 of them for no reason. Stop fooling people now. Better go with local brands.
1/ We got 39,636 files back from a ransomware attack without decrypting a single one.
8 TB drive. 127,852 files renamed .Funder. Proxima/BlackShadow. No decryptor exists.
I gave up on this case before I solved it. Thread.
#Ransomware #DFIR #Funder #Proxima #BlackShadow #Recovery #cybersecuritytips #Infosec
16/ The lesson.
Modern ransomware crypto is not a lock you pick. Proxima's is correct and we did not break it.
Everything came from what it left exposed. Do not fight the crypto. Enumerate the untouched.
17/ Full writeup with every command, every hex structure, and the recovery toolkit, published for anyone hit by .Funder:
straightarc.com/Insights/Rec…
Next Thread covers the intrusion itself. The DFIR side.
What do you do when despite registering for DND your service providers spams you @Airtel_Presence @bhartiairtelfdn @TRAI
