Security News > 2021 > May > On the Taxonomy and Evolution of Ransomware

Human-operated ransomware attacks generally take several weeks to pull off.

If you heard that someone with brand X ransomware paid a ransom and still lost their data, you would be less likely to pay the ransom.

Each ransomware group effectively has a positive-spin P.R. strategy and employs a customer-success team to ensure that their "Customers" have a positive experience when they pay a ransom.

Recent business-model evolution has also occurred: Gangs like REvil, DarkSide and other strains of human-operated ransomware have moved to a franchise model.

Existing commodity ransomware attacks can generally be blocked on entry.

Human-operated ransomware attacks are very similar to other targeted cyberattacks in that many of the countermeasures to protect against them are the same.

News URL

https://threatpost.com/taxonomy-evolution-ransomware/166462/