What You Should Know if Your Business Is Targeted by Ransomware

Reading Time: 4 Minutes

It may not be news to you that ransomware is on the rise, but the numbers may leave you shocked. In 2020 alone, there were close to 300 million ransomware attacks worldwide. The cost of ransom payments demanded by hackers is also increasing in tandem with the increase in attacks. According to a recent projection, the global annual loss from ransomware attacks will touch $20 billion by the end of 2021.

Offerings like ransomware-as-a-service have made it easier for criminals with little technical knowledge to become threat actors. These attackers are less predictable and seem to lack a code of ethics. For example, groups in the past had lists of organisations they wouldn’t attack, such as cancer treatment facilities. That’s often not the case anymore, as we’ve seen in recent attacks in the HSE and NHS (click the link below for more details on those cases).

Read: Ransomware – The Cybercrime that has struck the HSE

A ransomware attack can affect any organisation, regardless of size or industry. However, SMBs are the most vulnerable since cybercriminals count on these businesses to lack the resources to battle cybercrime or the IT teams to evaluate cybersecurity measures regularly. Even though SMBs continue to be disproportionately affected by these nefarious attacks, reporting and notifications rarely make the news unless a huge corporation experiences a breach.

With ransomware expected to hit businesses every 11 seconds, always remember that it isn’t a question of IF but instead WHEN your business will come under attack. Keep in mind that with the right security solutions and measures in place, your business won’t have to experience a devastating breach. But first, there are a few things you should know if you experience a ransomware attack.

1- Before Reacting to a Ransomware Attack, Remember:

The FBI advises against paying a ransom because spending money does not guarantee the hackers will share the keys to decrypt your data. Most respected security organisations worldwide also advise against it.

It doesn’t make any sense to place your trust in cybercriminals who have already demonstrated that they aren’t afraid to break the law and take advantage of you for financial gain. However, many businesses find themselves in this situation because they don’t have sufficient security, backup or compliance measures and are desperate to get their data back.

Want to dig deeper? Check our Complete Guide on Ransomware and How to Avoid it

Keep in mind that another reason the FBI advises against giving in to ransomware demands is that you are encouraging criminals to conduct further attacks. If nobody ever paid the ransom, there wouldn’t be as many ransomware attacks. Criminals would have to find new ways to make money and would disregard ransomware as a viable venture.

2- If you fall victim to a ransomware attack and have no option other than paying, “ransomware negotiators” are available for hire.

In ransomware negotiations, the most crucial moment occurs long before the victim and hackers discuss the ransom. This is because by the time both sides start to discuss, hackers have already gained considerable control over the organisation’s network by encrypting access to sensitive business data and other digital assets. The more data they encrypt, the greater the negotiating power they have.

So, even before you begin negotiations, you need to know how much data has been compromised and what negotiating methods have been employed in the past by the criminals. Professional ransomware negotiators can help at this stage. Although a ransomware negotiation rarely results in a ransom demand being totally withdrawn, it can significantly bring down the asking price.

3- Victims of ransomware should expect the following:

• The data will not be erased in a trustworthy manner. It will be sold, improperly handled or stored for future extortion attempts.
• Multiple parties would have handled the exfiltrated data, making it insecure. Even if the hacker deletes a large portion of the data once the ransom is paid, other parties who had access to it may have made duplicates to make payment demands later.
• Before a victim can respond to an extortion attempt, the data may be leaked intentionally or inadvertently.
• Even if the threat actor explicitly promises to release the encrypted data after payment, they may not keep their word.

Make Your Move Before It’s Too Late

You’re probably wondering what steps you can take right now to combat the menace of ransomware targeting vulnerable systems. Our best recommendations are layered security and a robust backup strategy.

Related Read: Backup Strategies to Prevent Data Loss

Since no security technology or measure is flawless or guaranteed, layered security assumes that attackers will infiltrate different layers of an organisation’s defences or have already done so. This approach aims to provide multiple security measures so that if an attack gets past one security tool, there are others in place to help identify and stop the attack before your data is stolen.

If the idea of protecting your business is overwhelming, don’t worry. You don’t have to do it alone. Collaborate with an experienced partner like us to do the heavy lifting for you. Our cybersecurity expertise and knowledge will help you pave the way to a more secure future. To get started, contact us and talk to one of our specialists.

Our team will be happy to understand your concerns and propose a tailored solution to address your business challenges. Don’t spend another minute worrying about cyber threats and find true peace of mind by knowing we got your back!

Sources:

1. Statista
2. Cybersecurity Ventures