Play Ransomware Decryptor help need

Hardware Hub
,
1

Hi everyone, few days ago our servers got encrypted by PLAY ransomware, is there any way to recover our data? any decryptor for play ransomware? ill appreciate any help or tip

2

I have no experience with this but. they suggest White Phoenix

1 Like
3

Thanks for the reply! ill definitely try it.

1 Like
4

Best of luck in recovering your data!
But tell us more about how it happened, why wasn’t the server secured?

1 Like
5

Thanks for asking! The attack took us by surprise. We had some security in place, but unfortunately, there was a gap that was exploited. Ransomware can be tricky to defend against, and we didn’t catch this one in time.

1 Like
6

Fortunately, I received help from a ransomware recovery company called Cyberxel. After extensive research on YouTube, I found them, and they successfully recovered all my important data.

2 Likes
7

Any information you can supply would be helpful to find the service that help you recover - much appreciated

8

The user @Aiden appears to have been a shill account used to promote the company Cyberxel who is not a cyber security outfit after checking OSINT sources.

firefox_pUOgeqO29M
firefox_pUOgeqO29M1160×758 103 KB

firefox_0mgBFG35qv
firefox_0mgBFG35qv1152×772 99.8 KB

The open source tool listed above by @anon58845094 is currently your best bet at recovering as the ransomware itself did not use a strong encryption method (after reading the analysis from CyberArk).

Again, I would not trust Cyberxel:

leads us to this:

firefox_maadAIOoJ0
firefox_maadAIOoJ01381×963 239 KB

best case: Cyberxel is shilling their own service which uses White-Phoenix, worst case they are threat actors involved with the Play ransomware group, which I would strongly recommend reading their online reviews for more background before forming any opinion.

2 Likes
9

This topic was automatically closed 273 days after the last reply. New replies are no longer allowed.