Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Ransomware Hits Excel Files, No Extension Change
A user reports Excel files encrypted by ransomware with unchanged extensions and no ransom note, complicating strain identification.
STOP Djvu .avyu Ransomware Encrypts Personal Files
A user reports personal photos and videos encrypted with .avyu extension by STOP Djvu ransomware. Emsisoft support has no decryption solution.
STOP Djvu .avyu Ransomware: Offline ID Needs Expert Help
A user reports personal files encrypted with .avyu by STOP Djvu ransomware. Emsisoft support was contacted but no solution yet; seeking expert advice.
STOP Djvu .avyu Ransomware: Offline ID Needs Expert Help
A user reports personal files encrypted with .avyu by STOP Djvu ransomware. They contacted Emsisoft, but the offline ID requires expert analysis for p
STOP Djvu .avyu Ransomware: Offline ID Decryption Help
A user reports personal files encrypted with .avyu by STOP Djvu ransomware. They seek expert advice on decryption, noting an offline ID.
Akira ransomware uses Safe Mode to disable defenses
An Akira affiliate rebooted a victim into Safe Mode to disable Huntress and Defender, but the encryptor failed.
Microsoft 365 backup gap leaves customers responsible after
Microsoft does not guarantee restoring customer data to a known-good point after ransomware, making independent immutable backups essential.
Shell probes Clop data theft claims
Shell is investigating a potential incident after Clop ransomware claimed to steal 89GB of data, likely via CVE-2026-12569 attacks on PTC Windchill an
Cl0p claims mass hack of Shell, Philips and dozens more
Russia-linked Cl0p ransomware group claims attacks on Shell, Philips, and nearly 50 companies in a new wave of breaches.
Team Punisher Ransomware Encrypts Files as .punisher
A ransomware attack encrypts files with .punisher extension. System restore didn't recover all files, leaving many still infected.
Microsoft's Shared Responsibility Model: Backup Gap
Microsoft's native tools don't guarantee ransomware recovery. Customers must plan independent backups to restore data after an attack.
Akira ransomware disables EDR via Safe Mode, fails to
An Akira affiliate used Safe Mode to disable EDR and Defender, stole data via S3, but failed to encrypt due to low memory.