An organization hit by a ransomware attack finds itself in a nightmare.
Business operations come to a standstill, systems are shut down, data is
inaccessible.
What exactly happened? Is there any information left to secure? Who should
inform whom? Can we do it ourselves or do we need a specialist?
And then the next moment the message arrives, in which the attacker
announces the amount of money that is to be paid to obtain the key to
recovery.
Paying a ransom or negotiating with criminals is problematic to say the least.
Still, a significant percentage of ransomware-affected businesses see no
other option than to negotiate and in the end pay the ransom. But not much
is known about the economic backgrounds of digital extortion and about the
negotiation strategies in the case of digital extortion.
That gap prompted to investigate negotiations that take place after the
decision has been made to pay a ransom after a successful ransomware
attack.
Click on 'read report' to read more about the economics of ransomware negotiations.