Skip to main content

Malware & Ransomware Help for Individuals

If it is your device, account or business, or you are authorised to act for the owner, we can assess whether the matter fits our services. Start with high-level facts only; never send files, passwords or private messages through this website.

individuals.routeREADY

Private cyber security help starts with ownership and fit

This practice is built primarily for government and business work. Individuals are welcome when the matter is lawful, authorised and a fit for the services we actually deliver. We decline work outside those boundaries and do not ask for sensitive evidence before suitability is established.

We may be able to help with

Suspicious device or process

A device you own behaves unexpectedly and malware analysis may help explain the evidence.

Ransomware or extortion

A device or business you own or represent needs containment and recovery guidance.

Unsupported software

You own software that no longer has source, documentation or vendor support.

Work we cannot accept

  • Unauthorised access to someone else’s system or accounts
  • Bypassing another person’s security or protections
  • Surveillance of another person without lawful authority
  • Cracking licences, DRM, anti-cheat or copy protection
  • Recovering access to an account you cannot prove is yours

Authority is required

Owning a concern is not the same as owning the target. We verify authority before any analysis, reverse engineering or recovery work begins.

What to share first

Ownership

State whether you own the device, account, software or affected business.

Technology

Name the general device or software type without attaching files or logs.

Urgency

Say whether activity is ongoing and whether operations or safety are affected.

Before you contact us

Do not describe a suspected offence, malware name, private dispute detail or personal records in the public form. We ask only what is needed to check suitability.

If you are in an incident right now

Use Get incident help. Disconnect the affected device from the network if you can do so safely. Do not pay a ransom before getting advice. Report cybercrime at ReportCyber. If someone is in immediate danger, call Triple Zero (000).

Pricing

Further operating facts

Hours, telephone, insurance, panels and similar claims are published only when they can be evidenced. They are omitted here rather than guessed.

Ready to talk about your situation?

Tell us the high-level scope. No malware, source code or evidence – just enough for us to route you safely.