Ransomware Crews Switch Off Security Tools Before They Encrypt, Acronis Finds

Cyber Insurance News story on EDR killers, showing an office smoke alarm with its cover open and the battery removed

Attackers increasingly stop endpoint agents, tamper with logging, and delete backups before they deploy ransomware. MITRE made that its own attack tactic in April. All three systems sit on broker Marsh’s list of 12 key cyber controls. Acronis released its first TRU Cyber Pulse report on Nov. 9. Its Threat Research Unit (TRU) drew on … Read more

Healthcare Ransom Payments Keep Falling. Downtime Still Drives The Bill.

Cyber Insurance News report on healthcare cyberattacks showing a dark hospital corridor with blank monitors and an empty gurney

Fewer healthcare organizations hit by ransomware are paying, a Ponemon Institute survey for Proofpoint finds. The costliest healthcare cyberattacks still averaged $4.2 million, mostly in downtime. The patient harm the study highlights may sit outside cyber cover. Healthcare organizations hit by ransomware are paying less often. In 2022, 51% said they paid. This year, 31% … Read more

A Ransomware Firm Promised Not To Pay Hackers. Prosecutors Say It Paid Them And Marked Up The Bill.

Cyber Insurance News story on a ransomware recovery firm fraud case showing a glowing digital key beside an invoice on a dark desk

Federal prosecutors have charged the owner of MonsterCloud with wire fraud. The Florida ransomware recovery firm sold victims an alternative to paying criminals. Prosecutors say it paid the criminals and billed clients far more. ProPublica flagged the practice in 2019. A ransomware recovery firm told victims they would not have to pay. It paid anyway … Read more

Fewer Ransomware Victims Pay. Those Who Do Pay More, GuidePoint Finds

Cyber Insurance News story on ransomware payments showing a wide stream of lights narrowing to a gate where only a few pass through

Ransomware victims hit a record 2,760 in the third quarter, GuidePoint Security’s research team found. Its own data on ransomware payments carries the insurance story. Fewer clients paid ransoms. Those who paid, paid more. GuidePoint also says risk models built on attacker effort need revisiting. Fewer ransomware victims are paying. The ones who pay are … Read more

Headquarters Pays The Ransom. Franchisees Set The Rules.

Cyber Insurance News story on franchise cyber risk showing a row of shopfronts with one store's red glow spreading to its neighbors

VikingCloud surveyed large multi-location brands, which the report calls “distributed enterprises,” on how attacks spread and who pays. Headquarters makes the ransom call far more often than it mandates security. The survey did not ask whose cyber policy responds. When ransomware hits one location of a large brand, headquarters usually makes the ransom call. That … Read more

×