White Rabbit Ransomware
Recovery Services

White Rabbit Ransomware Recovery Services 

A new threat has appeared in the form of the novel White Rabbit ransomware, which is already posing a significant threat to professional networks. Despite the ransom note being adorned with adorable ASCII bunnies, the virus is particularly difficult to combat, and like most other modern forms of ransomware, White Rabbit is a double-extortion play, threatening victims with publishing data on the Internet if the ransom is not paid.  

What is White Rabbit Ransomware? 

The White Rabbit ransomware variant functions by encrypting computer and server hard drives and forcing users pay a ransom to regain access to their files. This ransomware is discreet and capable of spreading quickly, and it attacks both Windows and Linux systems. 

This new strain of malware gives users a four-day countdown until their data is either sold, published, or deleted. Within this time, victims are invited to talk to the perpetrators of the attack over a Tor messenger to secure payment arrangements and view proof of the hackers’ possession of the victim’s data. Once a device has been attacked by White Rabbit ransomware, any external drives attached will also run the risk of being infected. A .txt ransom note will be generated with the encryption of each file, where the victim is informed of their circumstances. The virus is particularly difficult to detect because the file is small (~100KB). 

Where did White Rabbit Ransomware Come from? 

The White Rabbit ransomware is believed to have either been created by a hacking entity known as FIN8, or by somebody closely emulating them. FIN8 has been responsible for the birth of several other malicious software in the past, all of which are financially motivated. White Rabbit is thought to be the latest iteration of a past piece of malware created by the group (Badhatch).  

How Can You Protect Against White Rabbit Ransomware? 

With threats of a ransomware attack high, there are several things you can do to protect yourself. First, it is important that you back up all your files on a regular basis. If you do not have a backup system in place, then this attack will be devastating. Make sure your backups are air-gapped, meaning that they are separated from your regular network, or they too will be encrypted or deleted. Another crucial step is to make sure that your PCs, laptops, and servers are always up to date with the latest operating system and application updates; this is called software patching. This will help prevent any vulnerabilities in the software from being exploited by malware like White Rabbit. Make sure you update your antivirus security software regularly so that it has the most current protection possible. There are many other things you should do as well. You can read more recommendations here: Reduce the Risk of Ransomware & Other Cyber Attacks. These steps will go a long way towards protecting yourself and your network from this type of attack. 

Choose Alvaka for White Rabbit Ransomware Recovery Services 

At Alvaka, our 24/7 team of experts are confident that that we can root out White Rabbit Ransomware and help your company recover from the attack. Our team is experienced in all forms of ransomware attacks, and we strive to save companies money, data, and reduce downtime.  

 Additionally, Alvaka can help educate your company about how to prevent an attack, monitor your systems, and ensure that future attacks are mitigated before they can affect your network. We can help your company at any stage of a ransomware attack, but acting quickly is crucial to ensuring that the highest level of remediation can be achieved.