One of our servers have recently been hit by ransomware I have not yet seen.
I scanned it with mbam, Kaspersky and Symantec. Everything came back clean, I looked at Crypto Sheriff and some tools for ransomware removal from Kaspersky, no success on any of that. Eventually I got hold of Emsisoft and it was able to tell me the files are encrypted with REvil, after reading up I gave up on recovering anything.
Besides South Africa, has there been any other occurrences of this recently? So far it seems that it got in via ConnectWise just trying to see who else is affected.
