Ransom Demand? 10 Reasons to Think Before Paying
summary
Ten concrete reasons to hesitate include legal bans on government payments in North Carolina and Florida, OFAC refusal to license payments to sanctioned actors, and practical failures: 50% of victims pay and only 50% of those get working keys, backups often fail or don’t exist, repeated “second‑trench” extortion is common, exfiltration occurs in over half of cases, insurers cut coverage to low limits (examples around $250k), rise of ransomware‑as‑a‑service, help‑desk facilitation, and wiper campaigns that never restore data.
AI-written summary · about
chapters (15)
- 0:00Introduction to ransomware dilemma
- 1:51Legal and compliance considerations
- 8:41Sanctions and payment legality
- 11:36Decryption key reliability risks
- 16:48Exfiltration and double extortion
- 24:43Paying doesn't erase breach obligations
- 30:30Reputation and repeat targeting
- 36:20Non-criminal misuse of ransomware
- 38:07Nation-state wiper attacks
- 41:04Insurance industry's evolving role
- 44:35Time pressure and crisis management
- 47:49Public sector ransomware trends
- 49:15Future of ransomware attacks
- 50:20Preparation and muscle memory
- 55:47Regulatory and transparency challenges
related talks
38mUnderstanding Response Risk Relative to Ransomware and DoT Guidelines
40mA Review of the Ransomware Threat Landscape
27mRansomware: A database survival guide
35mFrom $10 to $30M: Operating in the Data-Extortion Aftermath
44mThe Reason Companies Fall Victim to Ransomware Isn’t What You Think
22m"I was told to buy a software or lose my computer. I ignored it": A study
40mRansomware: New Recipe For An Old Dish
01h 14mKeynote: Our Secure Future