eXemplify - More Than A Technology Services Distributor (TSD)

  • Business Solutions
    • Technology Procurement
    • Managed Services
    • Managed Security
    • Professional Services
    • Telecom & Networks
    • Cloud PBX/UCaaS
    • Cloud Infrastructure
    • Data Center
    • SD-WAN
    • Disaster Recovery
  • Partners
    • Sales Partner Program
    • Become A Sales Partner
    • Testimonials
  • Suppliers
    • Our Suppliers
    • Supplier Partner Program
    • Become A Supplier Partner
  • Company
    • About eXemplify
    • eXemplify Team
    • Case Studies
    • Careers
    • Client Testimonials
  • Blog
  • Newsletters
  • Contact
  • Business Solutions
    • Technology Procurement
    • Managed Services
    • Managed Security
    • Professional Services
    • Telecom & Networks
    • Cloud PBX/UCaaS
    • Cloud Infrastructure
    • Data Center
    • SD-WAN
    • Disaster Recovery
  • Partners
    • Sales Partner Program
    • Become A Sales Partner
    • Testimonials
  • Suppliers
    • Our Suppliers
    • Supplier Partner Program
    • Become A Supplier Partner
  • Company
    • About eXemplify
    • eXemplify Team
    • Case Studies
    • Careers
    • Client Testimonials
  • Blog
  • Newsletters
  • Contact

Two New Challenges for Ransomware Recovery

Two New Challenges for Ransomware Recovery

September 6, 2021 by Robert Hayes

Is your ransomware recovery plan ready for double extortion and double encryption?

Ransomware recovery is always being pushed to new levels, and cyber criminals have two new tricks that are challenging cyber security plans to keep pace. Take a look at two developments causing headaches for security teams:

Double Encryption: In this model of ransom attack, ransomware recovery is hindered by the use of two rounds of encryption. Victims must pay for either a set of data that has been encrypted by two different strains on the same data or a side-by-side attack, where different types of encryptions have been used for different systems within the company.

Ransomware recovery requires that when the ransom is paid, the company is provided with steps for decryption. But the onus is on attackers to provide adequate instructions, and the victim has no assurance that they will be successful in regaining their data. In addition, decryption will likely be a manual, time-consuming process – and in side-by-side attacks, the company may struggle to determine which encryption method was used for each system attacked.

Double Extortion: Ransomware attackers steal plaintext information and then launch their encryption process. They then demand two ransoms. One is for the decryption solution and the other is to delete the victim’s data from their servers.

These two steps ensure that the attacker is paid, because while a backup may help the company avoid decryption, it doesn’t do anything to prevent the data being sold to someone else. Ransomware attackers form cartels where they sell one another data and continue threatening a company to gain additional ransoms. Even when the company pays the double ransom, there’s no guarantee that the data will be deleted and not sold.

The Risks of Paying Up: There are some good reasons why a company should never pay a ransom. First, the ransom doesn’t guarantee that the attackers will provide the decryption utilities – and even if they do, recovering data is manual and cumbersome with a high risk of data corruption.

Second, companies may find themselves in violation of the U.S. Department of the Treasury’s Office of Foreign Assets Control regulations. Companies that pay a ransom may have to add a penalty on top of their financial woes.

Having a reliable backup is always the first defense against these types of attacks, but there are other steps you can employ:

·         Create a data theft prevention strategy.

·         Monitor user behavior to identify threats or anomalies.

·         Use multi-factor authentication.

·         Employ penetration testing to identify weak spots in the network.

·         Schedule employee training to help them recognize a threat.

The right strategy also demands the right monitoring tools and a technology partner that can guide you to the best solutions for ransomware recovery. Contact us at eXemplify to discuss the best possible cyber security plan to protect your data and systems.

Keep Reading

  • In the IT Environment, Cyber Security Is a Team Effort

    Having an effective security team is just one part of the cyber security equation. Every…

  • The Ultimate Security Checklist

    The complicated undertaking of setting a security strategy can be overwhelming, as can the thought…

  • Are You Suffering from Cyber Intimidation?

    Security threats are everywhere. Are you racing against the clock betting that one won’t happen…

Filed Under: Cyber Security Tagged With: cyber security, ransomware, ransomware recovery

Contact eXemplify

We do more so you can, too.

    Recent Posts

    • The Business Leader’s Guide to Hyperautomation
    • 4 Ways SMBs Can Leverage the Internet of Things (IoT)
    • How To Streamline Business Workflows With Ucaas Solutions Integration
    • 3 Ways 5G Technology Impacts SMB Growth
    • Colocation: The Sustainable IT Solution for SMBs

    Archives

    • June 2024
    • May 2024
    • April 2024
    • February 2024
    • January 2024
    • December 2023
    • November 2023
    • October 2023
    • September 2023
    • August 2023
    • July 2023
    • June 2023
    • May 2023
    • April 2023
    • March 2023
    • February 2023
    • January 2023
    • December 2022
    • November 2022
    • October 2022
    • September 2022
    • August 2022
    • July 2022
    • June 2022
    • May 2022
    • April 2022
    • March 2022
    • February 2022
    • January 2022
    • December 2021
    • November 2021
    • October 2021
    • September 2021
    • August 2021
    • July 2021
    • June 2021
    • May 2021
    • April 2021
    • March 2021
    • February 2021
    • January 2021
    • December 2020
    • November 2020
    • October 2020
    • September 2020
    • August 2020
    • July 2020
    • June 2020
    • May 2020
    • April 2020
    • March 2020
    • February 2020
    • January 2020
    • December 2019
    • November 2019
    • October 2019
    • September 2019
    • August 2019
    • July 2019
    • June 2019
    • May 2019
    • April 2019
    • March 2019
    • February 2019
    • January 2019
    • December 2018
    • November 2018
    • October 2018
    • September 2018
    • August 2018
    • July 2018
    • June 2018
    • May 2018
    • April 2018
    • March 2018
    • February 2018
    • January 2018
    • December 2017
    • November 2017
    • October 2017
    • September 2017
    • August 2017
    • July 2017
    • June 2017
    • May 2017
    • April 2017
    • March 2017
    • February 2017
    • January 2017
    • December 2016
    • November 2016
    • October 2016
    • September 2016
    • August 2016
    • July 2016
    • June 2016
    • May 2016
    • April 2016
    • March 2016
    • February 2016
    • January 2016
    • December 2015
    • November 2015
    • October 2015
    • September 2015
    • August 2015
    • July 2015
    • June 2015
    • May 2015
    • April 2015
    • March 2015
    • February 2015
    • January 2015
    • December 2014
    • November 2014
    • October 2014
    • September 2014
    • July 2014
    • June 2014
    • February 2014
    • January 2014
    • September 2013
    • June 2013
    • April 2012
    • March 2012
    • February 2012
    • January 2012
    • December 2011
    • September 2011
    • August 2011
    • May 2011

    Who is eXemplify

    Site Map

    • Business Solutions
      • Technology Procurement
      • Managed Services
      • Managed Security
      • Professional Services
      • Telecom & Networks
      • Cloud PBX/UCaaS
      • Cloud Infrastructure
      • Data Center
      • SD-WAN
      • Disaster Recovery
    • Partners
      • Sales Partner Program
      • Become A Sales Partner
      • Testimonials
    • Suppliers
      • Our Suppliers
      • Supplier Partner Program
      • Become A Supplier Partner
    • Company
      • About eXemplify
      • eXemplify Team
      • Case Studies
      • Careers
      • Client Testimonials
    • Blog
    • Newsletters
    • Contact

    Our Newsletter

      Contact us

      eXemplify

      469.361.5700

      Blogs

      • The Business Leader’s Guide to Hyperautomation June 20, 2024
      • 4 Ways SMBs Can Leverage the Internet of Things (IoT) June 13, 2024
      • How To Streamline Business Workflows With Ucaas Solutions Integration May 13, 2024

      2016 © eXemplify. All Rights Reserved | Website Designed & Developed by Mojo Marketing | Privacy Policy | Terms of Use