Greedy Ransomware Crews Return for Seconds
22% of victims who pay are targeted again.
1Paying Ransom Doesn't Solve the Problem
Proofpoint's research shows that 22% of organizations that pay a ransom are targeted again. This demonstrates that paying doesn't resolve the issue and that cybercriminals are untrustworthy. In the UK, 58% of organizations paid, but it didn't protect them.
2Global Situation is Alarming
Globally, 54% of victim organizations pay ransoms. While the rate is 19% in Japan, it skyrockets to 93% in the US. Regional variations are attributed to regulatory environments, recovery capabilities, and insurance structures. However, the core truth remains: paying doesn't solve the problem.
3Cybercriminals Retain Stolen Data
Operation Cronos, which dismantled the LockBit gang, proved that cybercriminals retain victim data even after receiving payment. This shows that paying doesn't restore the status quo. Some victims never recovered their files despite paying.
4Decryptor Errors Create Further Issues
Nitrogen's ESXi ransomware victims faced issues due to a coding error in the decryptor, leaving some unable to fully restore access. This highlights that paying isn't always a solution and that cybercriminals don't keep their promises.
5Cyber Resilience is the Key Solution
Instead of paying ransoms, organizations need to build cyber resilience. This is a critical step to prevent attacks and mitigate their impact. Cybersecurity measures offer a more effective solution than paying ransoms.
6AI Makes Attacks More Dangerous
While AI doesn't directly impact ransomware attacks, it enhances the effectiveness of precursor attacks. In the UK, 65% of security practitioners noted that AI sharpens phishing and credential theft campaigns. This underscores the importance of the human factor.