Ransomware behavior is becoming increasingly insidious. It is no longer true that, after live data has been encrypted, everything can be easily and automatically restored from a backup. Today’s ransomware strains first try to attack the backups themselves or attempt to disable protection and backup software so that, when the organization starts its backups, it finds that it actually has no usable backups and that the only chance is to pay the ransom.
And as the icing on the cake, the latest versions also threaten to publish sensitive data if the ransom is not paid. This is very unpleasant both for commercial companies with valuable intellectual property and patents, and for public organizations, which face high fines for insufficient protection of personal data under the GDPR.
Article author: ZEBR.ai editorial team
