How to Negotiate With Ransomware Attackers
Organizations hit with ransomware often find themselves in a crisis: To pay or not to pay? Most security experts agree payment is not the ideal response to a ransomware attack. But the truth is, some organizations don't have a choice — and in these cases, they need to have a strategy.
"One thing that makes a crisis more manageable is to have as much information as possible," said Pepijn Hack, cybersecurity analyst with Fox-IT, part of NCC Group, in a talk at last week's Black Hat Europe in London.
Hack and his colleague, threat analyst Zong-Yu Wu, sought to learn how attackers maximize profits, the position victims are put in during negotiations, and how businesses hit with...