May 12, 2022

‘Double extortion’ – evolving ransomware tactic

Double extortion’ is the term given to an evolving ransomware tactic: first, steal confidential data, then encrypt the victim’s files.

 

Cybercriminal uses a database encryption attack to extort money but with an additional initial attack to ensure that the backup does not render the attack useless. Before a cybercriminal attack with ransomware, he hacks into the company’s database, extracts as much data as possible, and stores it on its servers. Then, the ransomware attack is launched in the normal way (this means carrying out combined attacks, in which, for example, a DDoS attack is triggered after a ransomware infection).

As the latest research shows the sector of small and medium-sized enterprises is the most exposed to double extortion attacks.

 

Here are some tips on how to prevent your company from cyberattacks:

👉 Focus on preventive measures: conduct simulation attacks and penetration tests.

👉 Provide regular security awareness training – increase employees’ awareness of possible dangers.

👉 Ensure that security best practices have been implemented across all users.

👉 Increase the security of your corporate e-mail inbox.

👉 Introduce active and up-to-date antivirus software in your organization.

👉 Protection against data leakage.

👉 Good organization of the offline and online backup plan.

👉 Business Continuity Plan in case of an incident.

 

These are just some of the recommended basic actions. You need to devote more time and attention to properly and, most importantly, effectively securing yourself and your organization.

Do you want to know more? Please contact us at info@wearenavirisk.com

 

Magdalena Jaczewska-Hawryluk

Cybersecurity Consultant

 

Photo: Fili Santillán

Read more:

‘Double extortion’ – evolving ransomware tactic

Double extortion’ is the term given to an evolving ransomware tactic: first, steal confidential data, then encrypt the victim’s files.   Cybercriminal uses a database encryption attack to extort money but with an additional initial attack to ensure that the backup does not render the attack useless. Before a cybercriminal attack with ransomware, he hacks […]

Verification of sanction lists – a comprehensive offer from NaviRisk

Businesses need to be able to be up to date with the dynamic sanctions landscape to stay compliant. NaviRisk screens sanction lists globally and in each country separately. The searches include lists published by states, organizations, and international unions. Apart from the most important UK, US, EU, and United Nations lists, we also check police […]

How the war in Ukraine changed companies’ approach to cybersecurity

Cybersecurity is a crucial element of every organization’s safety. COVID_19 pandemic has changed the labor market, turning our homes into offices and our families and guest into, willing or unwilling,  spectators or even participants of our professional activities. Even though some time has already passed since the pandemic, this situation has not returned to “normal” […]

CONTACT

NaviRisk Sp. z o.o.

ul. Huculska 5/6
00-730 Warsaw

+48 605 19 11 19 info@wearenavirisk.com

CONTACT FORM

Do you have any questions? Write to us!