iTWire understands that while significant progress has been made, it will take weeks for Nine to get back to the state that existed before the attack.
The Australian, a newspaper from the rival Murdoch camp, reported on Monday that Nine's ad revenue had taken a hit as the network attack had crippled the internal advertisement booking and placement system.
It said it believed that several Nine clients had gone to other companies after being told they could not book fresh slots on the radio stations that Nine owns.
The company is maintaining silence on other aspects of the breach but it is clear now that the Windows MedusaLocker ransomware was the malware that caused the problem.
The only thing that Nine is willing to say is: "We are currently moving to restore full services.
"We recognise the public interest and speculation around this cyber incident but we will not be making comments on the nature and motives of the attack."