BLACK-HEOLAS Ransomware Locked Key Systems in Timor-Leste: What Actually Worked in Recovery
![Serviço de descriptografia do BLACK-HEOLAS ransomware [.hels] Timor-Leste.](https://blog.fixransomware.com/wp-content/uploads/2025/12/MKP-ransomware-1024x1024.png)
It started as a routine workday in a company in Timor-Leste. Staff complained that critical applications froze, logins took too long, and shared folders timed out. When the IT team checked key servers, they saw that important data files had been renamed with a new extension .hels, and a single ransom note file called hels.readme.txt […]
