BAFAIAI Ransomware Hit Key Servers in Myanmar: How Critical Data Was Brought Back Online
The incident in a mid-sized organisation in Myanmar started with “strange slowness” on a few internal systems. User logins took longer than usual, some applications stopped responding, and shared folders returned random errors. When the IT team checked key servers, they discovered that important data files had been renamed with the extension .BAFAIAI. and ranom […]
BLACK-HEOLAS Ransomware Locked Key Systems in Timor-Leste: What Actually Worked in Recovery
![Serviço de descriptografia do BLACK-HEOLAS ransomware [.hels] Timor-Leste.](https://fixransomware.com/wp-content/uploads/2025/12/MKP-ransomware-1024x1024.png)
It started as a routine workday in a company in Timor-Leste. Staff complained that critical applications froze, logins took too long, and shared folders timed out. When the IT team checked key servers, they saw that important data files had been renamed with a new extension .hels, and a single ransom note file called hels.readme.txt […]
