Ransomhub Ransomware Decryptor HELP Needed | My server is infected by Ransomhub ransomware

[johnsonjames]

Hello, I am a software developer in a company. Recently, our server is encrypted by ransomhub ransomware. Our both Windows and Linux servers are inaccessible. Is there any way to get them back without paying ransom to the hackers?
Note: We have backups but they are way too old. New backups got infected as well.
Is there any decryptor available for ransomhub ransomware?
Need your help.
Thank you very much!

 

[rgd1101]

nope.

 

[USAFRet]

Note: We have backups but they are way too old. New backups got infected as well.
Is there any decryptor available for ransomhub ransomware?

This is what a good backup routine is for.

3-2-1
3 copies, on at least 2 different media, at least 1 offsite or otherwise unavailable.

 

[USAFRet]

Further info:
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-242a

There is currently no publicly available "decryption" for this.

 

[COLGeek]

Seems to be a local problem for both these members:

Question - Helldown Ransomware Decryptor help

Hello everyone! Is there a decryption tool available for Helldown ransomware? My server has been attacked, and I urgently need help to recover my data. Any tips or solutions would be greatly appreciated! Thank you

forums.tomsguide.com

 

[johnsonjames]

3-2-1
3 copies, on at least 2 different media, at least 1 offsite or otherwise unavailable.

You are right. We were not aware of this. Is there any other way to get it back?

 

[johnsonjames]

Seems to be a local problem for both these members:

Question - Helldown Ransomware Decryptor help

Hello everyone! Is there a decryption tool available for Helldown ransomware? My server has been attacked, and I urgently need help to recover my data. Any tips or solutions would be greatly appreciated! Thank you

forums.tomsguide.com

He got infected by helldown ransomware but my problem is with ransomhub.

 

[COLGeek]

He got infected by helldown ransomware but my problem is with ransomhub.

True, but two novel attacks seems too coincidental. Maybe not.

 

[johnsonjames]

True, but two novel attacks seems too coincidental. Maybe not.

After studying about it, I got to know that most of the ransomware are targeting same vulnerabilities in servers and attacking them. They are using very similar tactics to Lockbit and other popular ransomware such as Royal.

 

[USAFRet]

You are right. We were not aware of this. Is there any other way to get it back?

That would be like buying car insurance after the crash.
Not gonna work.

 

[johnsonjames]

That would be like buying car insurance after the crash.
Not gonna work.

Very sad but true 🙁.
Anyways, thanks for the help. Let me try to get help from some recovery companies, if they can provide me with good tools.

 

[COLGeek]

Very sad but true 🙁.
Anyways, thanks for the help. Let me try to get help from some recovery companies, if they can provide me with good tools.

I wouldn't expect a solution for the locked devices. Is that what you meant?

 

[johnsonjames]

I wouldn't expect a solution for the locked devices. Is that what you meant?

I am in contact with a recovery company. They are promising to provide me working solution. I'll update you, if I get it solved.

 

[USAFRet]

I am in contact with a recovery company. They are promising to provide me working solution. I'll update you, if I get it solved.

Good luck!

 

[johnsonjames]

Recovered all of my data successfully yesterday. Got help from a recovery company known as [possible scammer]. The company website is listed below for similar problems. Maybe, they can also help you.

[link removed]

 

[USAFRet]

And now we can close this.

(could have all been prevented with a good backup routine, but whatever)