Double extortion
A ransomware tactic that combines encrypting systems with stealing data beforehand, then threatening to publish the data unless the ransom is paid. Restoring from backups solves only the encryption half; the data breach remains. Besides keeping offline backups, watch for unusually large outbound transfers and prepare breach-notification and communication plans in advance.
Further reading: www.cisa.gov
From the Security Academy
How Ransomware Gets Into a Company: From Initial Access to Double Extortion
How a ransomware attack unfolds, from initial access and lateral movement to backup deletion, data theft, encryption and extortion, and where to stop it.
8 min read ·
Advisories that mention this term
No advisories mention this term yet.