Security News > 2021 > April > Ransomware: don’t expect a full recovery, however much you pay

Even worse, many ransomware gangs take the time to upload as much corporate data as they can before scrambling it, and they add this nasty detail into their blackmail notes.

Many ransomware gangs run their very own "Negative PR" portals on the dark web, where they publish the confidential data of victims who don't pay, or blog about how bad their victims' cybersecurity was, or both.

As we said above, ransomware really ought to be called "Blackmailware", not least because the crooks have figured out how to make their crime pay even when there's no data that they're actually holding to ransom.

The good news is that, as part of our ongoing efforts to track the evolving ransomware scene, we've just published our very latest State of Ransomware report for 2021.

Many ransomware gangs handle the data stealing side of their attacks by running a series of upload scripts that copy your precious files to an online file-locker service, using an account that they created for the purpose.

Backups are the still the most useful way of recovering scrambled data after a ransomware attack that runs its full course.

News URL

https://nakedsecurity.sophos.com/2021/04/27/ransomware-dont-expect-a-full-recovery/