Ransomware Shifts from Encryption to File Corruption
Businesses have traditionally believed that paying the ransom demanded by ransomware attackers will result in the restoration of their data.
However, this is changing as it has become costly for attackers to encrypt and decrypt data.
It is a game of cat and mouse since when decryption keys are discovered, attackers need to rewrite their software with new keys to ensure they maintain control over the data.
Attackers are now corrupting files instead of encrypting them, as seen with double extortion attacks. The attackers first steal the data and then corrupt it using software that makes the files unreadable, which is a straightforward process for experienced attackers.
This approach puts the system in a state where there is no data, making it easier for the attackers to get what they want.
With over two decades of experience in the cybersecurity industry, Bryan Hornung has seen the evolution of ransomware and other cyber attacks firsthand. Despite the ever-changing landscape of cyber threats, he remains committed to his mission of combating these dangers and protecting businesses from harm.
#ransomwarehistory
#ransomwareawareness
#ransomwarefacts
#cybersecurity
#protectyourbusiness