Business case hacker bitcoin extortion tool free problem solving

Business case hacker bitcoin extortion tool free problem solving. Ransomware is a popular Trojan in recent years. It harasses, intimidates and even kidnaps user files to make users' data assets or computing resources unusable and extort money from users. At present, China has become the hardest hit by ransomware and the loss caused by this one alone exceeds 1 billion yuan.

Since 2017, Efficient Source Technology has received dozens of public security agencies in case of extortion for corporate assistance. Among them, a recent case occurred in April this year: a gas company employees in a city of Sichuan found that the company gas system server was ransomware virus infection, all the key data and information are locked, resulting in the system can not be normal operation, such as figure 1. Hackers have left their email contacts on all encrypted files, requiring gas companies to pay up to 4 bitcoins before unlocking the password.

Figure 1: Files infected with ransomware virus

For extortion extortion software, companies either choose to pay ransom in order to get back the data, or choose to find a professional security vendor to decrypt the data.

If you choose to pay ransom, or may not get the data, the reasons may be: 1. Hacker exposed by foreign or domestic security caught; 2. Hacking site or server is blocked, you can not log in the background to confirm receipt of money ; 3 hackers decryption server problems, resulting in data can not be decrypted; 4 virus encryption program bugs, encrypted files and decryption is not complete.

The choice to find professional security vendors to decrypt data, are facing high technical service fees. Taking the present case as an example, after gas companies consulted with several information security vendors, they received more than 30,000 yuan in technical services and even exceeded the cost of hacking ransomware.

After receiving assistance in this case investigation, the efficiency of the source of science and technology in the first time to organize key technicians to carry out research and crack. As a national high-tech enterprise and a key new product development unit of the Ministry of Science and Technology, the efficiency source has 16 years of research on the underlying technology of media storage and the world's leading data recovery technology and has applied for more than 350 national patents.

Efficiency Source Technical engineers found that the ransomware in this case was the latest version of the virus known as the Wallet Trojan (main version 2017/3/30). Although this version of Wallet is also spread through the server, but the invaders have taken a more diverse approach - not just a simple scan of the 3389 port, but rather more systematic attacks on the server.

According to Wallet ransomware in this case, the efficiency source technical engineer successfully recovered the records of the database using the free software researched and developed by the author - Blackmail BT Currency Server Database Recovery Tool, as shown in FIG. 2 and FIG. 3.

Figure 2: Efficiency source blackmail BT coin server database recovery tool

Figure: 3: After a successful recovery of the database

Ransomware is constantly changing and free tools are constantly being upgraded

According to Huang Xu, deputy general manager of efficiency source introduction, the efficiency of extortion BT currency server database recovery tool currently supports multiple versions of the Trojan virus data recovery, as shown in Figure 4. Nevertheless, hackers are constantly updated virus version, once the new version of virus encryption, recovery will be more difficult. Therefore, the efficiency of the source of science and technology researchers will continue to conduct research, continue to blackmail the BT currency server database recovery tool version upgrades, in order to be able to better help customers solve such problems.

Figure 4: Extortion BT coin server database recovery tool supports virus version

In addition, Huang Xu also reminded: ransomware goals have begun to change from individual users to business users, enterprises should improve preventive measures, in accordance with the Ministry of Public Security "Information Security Level Protection and Management Measures" for safety assessment (both physical security, network security, host system Security, application security, data security, etc.), install the appropriate network security software, timely detection and elimination of security vulnerabilities. If the business experiencing ransomware problems, or public security agencies need assistance in such cases, the efficiency of source technology can provide free tools - blackmail BT currency server database recovery tool. This tool temporarily open service to ordinary users.