AI Briefing
KOSign in

Claude Recovers Ransomware-Encrypted Files by Reconstructing Data from Untouched Segments

·2026.11.05 09:21

Key point

The recovery process involved rebuilding file structures from unencrypted metadata and guessing the encrypted content.

1 / 2

Details

  • Claude recovered approximately 700 files encrypted by ransomware in 2019 without decrypting the original data.
  • The method relied on rebuilding file structures from parts the ransomware did not touch and guessing the encrypted segments.
  • The files were SketchUp models created in 2017 and stored for seven years after an automated attack via Windows Remote Desktop (RDP).
  • The user did not pay the ransom or delete the files, preserving them until AI capabilities allowed for reconstruction attempts.
aiencryptionclauderansomwaredata-recovery
Read originalShare on Threads

This summary was generated automatically by AI. Check the original for the author's claims and context. Copyright belongs to the original author.

Our guide explains how the AI works. Report summary errors, attribution issues, or removal requests via Contact.

Related

TLDR AIAnthropic IPO filing puts company in position for potential record valuationHacker NewsAnthropic restricts Claude from reverse-engineering video gamesRedditAnthropic report details Claude's role in mapping vault particles, noting 90-minute purification and two-week delay from protocol errorAnthropic ResearchAnthropic researchers use Claude to determine the first 3D structure of a prokaryotic vault particleKakao PayKakaoPay FE Harness: Model Improvements Reduce Agents from 21 to 11TLDR AIAnthropic S-1 filing warns company is close to recursive self-improvement capability