Ransomware negotiations

We are all aware that a ransomware demand is going to be Bitcoin or some other, almost untraceable, cryptocurrency, but exactly how much that is going to be in pounds, dollars or euros can vary.

It is now being reported that an “enterprising” ransomware gang is persuading victims that it is in the “best interest” of everyone – well mainly them – that the details of the maximum pay-out any cyber insurance will make, will be the amount of the ransom!

HardBit ransomware wants insurance details to set the perfect price (bleepingcomputer.com)

The HardBit ransomware states it does steal the victim’s data, but as of this moment the gang does not have a data-leak website, so the ransom is purely for the encryption key. Version 2.0 of the malware does include some sophisticated tools to disable and the user’s technical cyber security defences.

Your take away from this is that the threat of ransomware to your organisation is real. You need a plan.

Clive Catton MSc (Cyber Security) – by-line and other articles

Further Reading

Before you pay that ransom – you had better read the advice from the National Cyber Security Centre and the Information Commissioner:

NCSC and the ICO say – Don’t pay the malware ransom – Smart Thinking Solutions

Ransomware Mini-Series (2023)