@nightsky@BlueMonday1984
I worked in the IR space for a couple of years - in my experience significant portion of data encrypted by ransomware is just unrecoverable for a variety of reasons: encryption was interrupted, private key was corrupted, decryptors were junk, data was encrypted multiple times and some critical part of key mat was corrupted, underlying hardware/software was on its last legs anyway, etc.
@nightsky @BlueMonday1984
I worked in the IR space for a couple of years - in my experience significant portion of data encrypted by ransomware is just unrecoverable for a variety of reasons: encryption was interrupted, private key was corrupted, decryptors were junk, data was encrypted multiple times and some critical part of key mat was corrupted, underlying hardware/software was on its last legs anyway, etc.