Telecom Giant Mitigates Ransomware Attack Using KELA’s OCR and In-Depth Analysis

A ransomware breach at one of the client’s key suppliers implicated the telecom company itself, but the proof was cunningly concealed inside an image of a leaked non-disclosure agreement. KELA’s image-based threat detection extracted the text, recognized the client’s name and raised an immediate red flag.

KELA’s analysts assessed the severity, downloaded all leaked files to check for further company-related information, and delivered tailored remediation guidance, allowing the client to handle the incident with minimal damage.

Key results:

• Third-party breach exposure detected even though the evidence was hidden inside an image
• Keyword and entity recognition flagged the client’s name in the extracted text automatically
• Immediate alerting followed by analyst context and a severity assessment
• A comprehensive review of every leaked file for additional company data
• Tailored remediation guidance for a swift response with minimal damage