5 ms·

Isn't this more of a "We don't want our client / customer information released to The World At Large" question? I would think most business entities have backu

Isn't this more of a "We don't want our client / customer information released to The World At Large" question? I would think most business entities have backups of some kind (Scripps being the only exception I can think of), and will pay the ransom to keep any sensitive information off the market. Edit: Should have added that I find it hard to believe that companies have PB of data backed up. I could believe GB, and maybe even TB, but PB is pretty hard to swallow. The past three companies I've worked for (25 year span) had, at most, a couple of gigs of sensitive information that couldn't be easily replicated.

stan_rogers 5y ago
Ransomware attacks rarely indicate any data leakage; all they usually do is prevent you from accessing your own data (by encrypting your drive with a key you don't have access to).
- intothev01d 5y ago
  O rly? https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/modern-ransomwares-double-extortion-tactics-and-how-to-protect-enterprises-against-them https://www.trendmicro.com/vinfo/us/security/news/cybercrime...
- runnerup 5y ago
  These days attacks labeled “ransomware” in the news seem to be hybrid attacks. There usually is sensitive data exfiltration in addition to encrypt-in-place.
- djrogers 5y ago
  The current trend is double-extortion ransomware attacks - encrypt your copy of your data, and threaten to release it publicly as well. [1] https://www.cybereason.com/blog/rise-of-double-extortion-shines-spotlight-on-ransomware-prevention https://www.cybereason.com/blog/rise-of-double-extortion-shi...
nelgaard 5y ago
I also find it hard to believe that a ransomware gang could encrypt 50 Petabytes without anyone noticing it. It would also take some time to decrypt 50 petabytes if you paid the criminals and got the key. And would you trust you data after criminals had access to it?

stan_rogers 5y ago

Ransomware attacks rarely indicate any data leakage; all they usually do is prevent you from accessing your own data (by encrypting your drive with a key you don't have access to).

intothev01d 5y ago
O rly? https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/modern-ransomwares-double-extortion-tactics-and-how-to-protect-enterprises-against-them https://www.trendmicro.com/vinfo/us/security/news/cybercrime...
runnerup 5y ago
These days attacks labeled “ransomware” in the news seem to be hybrid attacks. There usually is sensitive data exfiltration in addition to encrypt-in-place.
djrogers 5y ago
The current trend is double-extortion ransomware attacks - encrypt your copy of your data, and threaten to release it publicly as well. [1] https://www.cybereason.com/blog/rise-of-double-extortion-shines-spotlight-on-ransomware-prevention https://www.cybereason.com/blog/rise-of-double-extortion-shi...

nelgaard 5y ago

I also find it hard to believe that a ransomware gang could encrypt 50 Petabytes without anyone noticing it. It would also take some time to decrypt 50 petabytes if you paid the criminals and got the key. And would you trust you data after criminals had access to it?