Have you been affected by
Onyx ransomware?

If you are attacked by Onyx Ransomware, turn off or disconnect the infected computer from yout network and contact us now.

Secure solutions for professionals and companies

Secure solutions for
professionals and companies

HELPRANSOMWARE IS RECOMMENDED BY

Onyx
Ransomware Recovery

Onyx ransomware, first observed in April 2022, is a particularly destructive variant that not only encrypts files but also destroys them if they are larger than 2MB.

Unlike typical ransomware that encrypts files for ransom, Onyx overwrites larger files, creating a significant loss for the victims.

This behavior was initially suspected to be deliberate, but it appears more likely to be an accidental coding mishap.

Onyx targets files with specific extensions and encrypts those smaller than 2MB using AES+RSA algorithms, appending a .ampkcz extension.

If the files are larger, they are destroyed by randomly creating junk data. A ransom note "readme.txt" is dropped into every encrypted directory, and the ransomware operators offer to decrypt two random files for free as proof of their ability to restore the data.

The ransomware is distributed through tactics like social engineering, phishing, and malicious attachments. It employs a double-extortion approach, threatening to publish stolen data if the ransom is not paid.

Interestingly, Onyx is based on the Chaos ransomware builder and shares similarities with the Conti ransomware gang's ransom note logic.

Secure and Fast Diagnosis to Analyze Ransomware Types and Cryptographic Attack Vectors

Our experts decipher RSA and AES algorithms, used by Governments, ISPs, Technological, Financial and Telecommunications Industries.

RSA as an asymmetric encryption algorithm uses 2 keys: 1 public to encrypt, 1 private to decrypt. AES is a symmetric encryption algorithm with common key lengths of 128, 192, and 256 bits.

Digital Forensic Analysis

We carry out a complete diagnosis of the encrypted files and affected systems to identify patterns that allow data recovery.

Reverse Engineering

We analyze the encryption algorithms to unlock your files and quickly find weaknesses in the code of the computer virus to decrypt it.

Forensic Data Recovery

We recover and remove the encryption of your files with advanced data recovery techniques and the creation of specific tools.

Advanced Cryptography

We have deep knowledge of encryption algorithms and the ability to develop cryptographic processes and constant investigation.

Expert Recovery Of Files Infected By Ransomware

We have highly-trained data recovery and ransomware decryption specialists.

Our professionals have extensive knowledge in cryptography, digital forensics, and reverse engineering, enabling them to solve complex technical problems and find efficient solutions.

Protect Your Company
From Data Breach!

Thanks to our Advanced Monitoring System, you may track and remove content hosted in the Deep Web.

A leak of confidential files can have legal consequences relating to GDPR, including the risk of identity theft, unauthorized access to the system, and consequent damage to your reputation.