Once a ransom was associated mainly with kidnappings of people today, the data acquisition, encrypting and demanding money for "freeing" this information comes first. Loud cases are coming up, some are getting to the point of being aware of the scale of the incident, the second target of the attack (eg hospital), and finally they are surprisingly high. In South Korea, it has recently hit a record: hackers have paid more than a million dollars.
The ransom that plunged the trader - in a nutshell, you can describe this case. The media recently reported that a man had to sell the company and sacrifice the rest of the property to meet hacker demands and save customer data. Hero. Or a man who underestimated safety issues and eventually had to pay for past mistakes.
The thing is happening in South Korea and concerns the hosting company Nayana. Some time ago, it was a victim of the Erebus virus, which infected more than 150 servers. Access to their data has lost several thousand customers. The attackers demanded more than $ 4 million in bitcoin, and the boss ... spread his arms because he did not have such a sum. In fact, it is not known today that it is necessary to negotiate. So negotiation was reached and the amount of up to a million dollars (with a tail) was cut. The sum is divided into three tranches; the next one is paid when a certain part of the data is recovered. It is estimated that 2/3 of the amount has already been passed to hackers.
Information about hackers is funny: you can talk to them about the price, and then help recover your data. These are not some kind of finger cutters - a new culture of "kidnapping". Another interesting issue is the "heroism" of the entrepreneur. I've already been asked whether Europe's or the USA's head of company would behave similarly and devote its own money to rescuing customers. Sometimes the answer is not that there are other rules in Korea. However, it is worth considering the alternative man had: if he did not pay, the property would probably eat the customer's lawsuits.
Now he could at least sell the company (the price had to be really attractive), he would come face to face with that story. And then ask questions about the security used by his business - it is in their weakness to find problems. It may sound good to him, it will be a good example for others. So far we have not had to deal with such sums when it came to hacking ransoms. And if anyone was paying, he did not make it public - just before the victim could go to Disney and although he assured that he would not pay, it is hard to tell how the case is over. So if businessmen hear that you can lose business by doing this kind of negligence, maybe they will go to work?
This in turn means that hackers can be more difficult. Unless the attacks are aggravated, people are motivated to act out the sum paid by the Korean: Let's act now while companies are poorly protected, and entrepreneurs are frightened. It can be really interesting. It is possible that the record ransom (officially) will soon be much higher, ransomware we will probably hear more than once. I would like to remind experts to not pay hackers in such situations, because there is no certainty that the data will recover. Well unless they will be as helpful as in this case ...
