It’s the kind of note that grabs you by the shirt and doesn’t let go: “All of your files are stolen and encrypted.”The next thing you read is the extortion demand: pay up, or else.In this scenario, your organization has a limited amount of time to ask a series of critical questions before making the ultimate choice. Are you defined as critical infrastructure? Is personal identifiable information at risk? Answers to those questions as well as others will lead to other questions, all of which will contribute to the ultimate question: Do you pay the ransom or not.
Click here to download the five-step decision-making tree to support your organization's efforts to first, identify gaps that could influence response to a ransomware attack; and second, understand some of the implications of a ransom payment for organizations.
An In-Depth Guide to Ransomware
Get essential knowledge and practical strategies to protect your organization from ransomware attacks.
The attack, which impacted services related to illicit-drug monitoring and legal processes, followed a warning from Colombia's national CERT about increased ransomware group focus on the country.
Perpetrators are largely using social engineering tactics, brute-forcing accounts with leaked passwords, impersonating social media customer service, and employing phishing emails with fake login pages.
