May 12, 2022
‘Double extortion’ – evolving ransomware tactic

Double extortion’ is the term given to an evolving ransomware tactic: first, steal confidential data, then encrypt the victim’s files.
Cybercriminal uses a database encryption attack to extort money but with an additional initial attack to ensure that the backup does not render the attack useless. Before a cybercriminal attack with ransomware, he hacks into the company’s database, extracts as much data as possible, and stores it on its servers. Then, the ransomware attack is launched in the normal way (this means carrying out combined attacks, in which, for example, a DDoS attack is triggered after a ransomware infection).
As the latest research shows the sector of small and medium-sized enterprises is the most exposed to double extortion attacks.
Here are some tips on how to prevent your company from cyberattacks:
π Focus on preventive measures: conduct simulation attacks and penetration tests.
π Provide regular security awareness training – increase employees’ awareness of possible dangers.
π Ensure that security best practices have been implemented across all users.
π Increase the security of your corporate e-mail inbox.
π Introduce active and up-to-date antivirus software in your organization.
π Protection against data leakage.
π Good organization of the offline and online backup plan.
π Business Continuity Plan in case of an incident.
These are just some of the recommended basic actions. You need to devote more time and attention to properly and, most importantly, effectively securing yourself and your organization.
Do you want to know more? Please contact us at info@wearenavirisk.com
Magdalena Jaczewska-Hawryluk
Cybersecurity Consultant
Photo: Fili SantillΓ‘n
Read more:
February 28, 2025
Fraud: Internal and Business Partner Scams
Fraud poses a significant risk not only to a company’s financial stability but also to the reputation of its owners. What exactly is corporate fraud, and how can it be detected? Understanding Business Fraud Fraud, by definition, refers to deliberate actions intended to deceive a company or business partner for financial gain. Common examples include […]
February 3, 2025
How To Mitigate Business Risks In 2025?
The business landscape is shifting quickly. Companies operate in a world of great volatility and complexity. This dynamic environment brings two critical areas of risk that organizations must manage: leadership and reputational risks. These critical elements are not abstract or academic issues; they matter regarding long-term corporate survival and success. How to manage those […]
October 23, 2024
NaviRisk’s Comprehensive Due Diligence for Business Partners in Far East
Companies are increasingly operating across borders, thus the complexity and scope of potential risks have grown. NaviRisk gives them a comprehensive background screening of potential business partners. One of the most critical applications of international, multi-juridical investigations is in the vetting process of potential business partners. Ensuring a business associate’s credibility and ethical standing has […]