Servers locked by ransomware, company demanding 500k lira — our backups were outdated

don't pay the ransom, it gets worse after. screenshot the hacker message open a police report. restore from backup, then just tell the manager 'this is what we have'

Backup is 2 weeks old, but how much data actually changed in those 2 weeks? Can business continue at 70%?

Stop arguing about paying the ransom. Look: install security software (immediately) restore from backup (in parallel), file police report (online 15 mins). Do all three simultaneously.

Depends on the ransomware type: some allow recovery key access, some give fake keys. Find out the attack type on your servers (WannaCry, Conti, etc.), check if USOM has a decryption tool.

paying 500k lira and not getting data back — most expensive market there is. restore from backup, get used to reset data don't pay the hacker it costs more in the long run

timely topic.

I've been dealing with this for a long time. honestly everyone rushing into ransomware recovery gets stuck at the same point.

Good luck with that.

The answer above hits the nail on the head. Most incidents start with a leaked password not a vulnerability.

If you have questions, write them; I'll answer as best I can.

Saved.

Thanks, that was the answer I was looking for.

I have a question. Don't rely on a single measure; go layer by layer.

We need to take it step by step. Just because everyone does it doesn't mean it's right.

I'm also curious if anyone does it differently.

this thread is archived.

The most overlooked point about ransomware recovery is this: Start with a small trial; don't commit to everything at once.

If I were you, I'd go this route.

I'm writing this so you don't make the same mistake. Most incidents start with a leaked password not a vulnerability.

The discussion got scattered, let me summarize. When we decide without measuring, we always end up in the same place.

Good luck with that.

I'm a small business, let me explain from my side. If you don't write this down from the start it leads to arguments later.

We need to take it step by step. Don't hesitate to ask; those who don't ask always pay more.

Any unwritten clause becomes a point of disagreement later, as both sides remember it differently. Hope this helps.