Cyber Security Pillar | November 18, 2022
This is where cybercriminals will be at the forefront in the coming weeks. Today you will learn what happens when you pay a ransom for your data.
“One moment please, I’ll connect the technology,” says the lady in the online chat window. You have just confirmed to us that the ransom of over CHF 200,000 has reached the Bitcoin account. Then it takes a few seconds and the young man answers. “Victor call me,” he says over the encrypted channel. “I will help you recover your data now. It may take a while, but it’s really easy.”
Victor is right. Once you have the decryption key, everything is very easy. Gradually, Excel worksheets become readable again. Likewise Word documents, PDF manuals and databases. Slowly but surely, the company is getting back in business. When there is a problem, Victor also helps out if needed. However, not all bands provide this first class service. Usually only the EXE file is left for decoding and you can try your luck yourself.
However, as a general rule, ransomware victims can count on the fact that data can be recovered, but that is by no means the end of the matter. In addition to losing money and returning from emergency operation to normal operation, it is important to enter orders, make late payments, comply with data protection reporting obligations and reassure customers.
Plus… there’s always the question of whether cybercriminals have left another door on the internet so they can fill their pockets again next year. Or whether the next gang isn’t ready and is already striking. There are cases where two different ransomware gangs were on the same network at the same time, getting in the way of each other and eventually destroying the data irreversibly.
For this reason, many companies have set up all their computers and servers again after ransomware attacks – or even replaced them. This not only costs time but also extra money. Therefore, the total damage of a ransomware attack is often two to three times higher than the actual ransom.
Learn how to protect against ransomware attacks and how best to respond when they happen in the next release.
What can you do about it? Secure your data with a ransomware-resistant backup system. With CyberProtectShield® from Bortoli GmbH, your data is protected from encryption! Book a free, non-binding consultation appointment www.bortoli.ch.
Bortoli GmbH – Swiss Cyber Security