Cloud Ransomware: Is a Snapshot a Backup?
A technical companion to the IDCF Cloud incident: snapshots, backups and replication; SQL Server recovery chains, 3-2-1-1-0 architecture and a business readiness checklist.
CUUDULIEUMAHOA.COM · BY TUNGTEK
TUNGTEK Blog & Case Studies
The context, methods and assessment results are presented within the scope that can be made public. Customer identities are withheld.
IronChain Ransomware: When Paying the Ransom Still Cannot Restore Your Data
Analysis of destructive encryption, BYOVD, partial encryption and assessment of intact data on SQL Server, NAS/RAID and virtual machines. Public research, rather than a customer case.
Ransomware Attacks a NAS: A USD 74,000 Ransom Demand — Ticket #1355
TUNGTEK received Synology HAT3300-4T drives to analyze the RAID, filesystem and prospects for extracting encrypted data. The case remains under analysis; the ransomware family and recovery results have not been announced.
Ransomware Accelerates: Another Organization Becomes a Victim Every Hour
TUNGTEK’s technical perspective on ransomware in 2026, leak-site data, RFC and encrypted data extraction prospects.
.PIZ Ransomware via MSSQL: From Brute Force to Safe Mode and Data Encryption
Analysis of the incident published by CyRadar: the attack chain before encryption, SQL Server risks and TUNGTEK’s approach to extracting encrypted data.
The Joy of Handing Over a BRAVO Database After .WEX Encryption
Lessons from Mallox to WEX: a 9.97 GiB MDF sample, 215 affected regions, RFC and validation in BRAVO before handover.
.PIZ Ransomware 2026: From Threat Intelligence to 8 Cases at TUNGTEK
PIZ-2026 / Pizhon-tracked | In-depth TEKLab analysis. Eight tickets, USD 2,000–12,000 ransom demands, entropy, IOC/TTP findings and evidence-based ransomware recovery.
NAS Encrypted with .encrypt at a Northern Vietnam Car Dealership
An anonymized case at a major car dealership, alongside TUNGTEK’s experience with four .encrypt cases at TEKLab. Learn how NAS systems are assessed, their current state preserved and data verified.