The small and medium business (SMB) community is no stranger to ransomware attacks. A recent report revealed that hackers have targeted 46% of SMBs, with 73% of those companies paying the ransom.
The report is based on a survey of more than 500 C-level executives. Of those surveyed, 87% were CEOs and the rest were CIOs and CTOs.
“Ransomware is not a new phenomenon,” said Russell P. Reeder, CEO of Infrascale. “However, it is surprising how many businesses are unprepared for a ransomware attack. It is shocking that during a time in which the world should be coming together in the fight against COVID-19, criminals are preying on unsuspecting people and organizations for personal – usually financial – gain. And, in many cases, these bad actors are actually benefiting.”
“With appropriate strategies using preventative measures like internet security and education, and protection measures like data backup and disaster recovery, you should never have to worry about paying ransomware,” he continued.
While 83% of SMBs said they felt prepared for a ransomware attack, 17% of the SMBs participating in the survey shared they didn't feel their organization was prepared for a ransomware attack. The SMBs that felt unprepared to go head to head with ransomware attackers indicated time and resources were their biggest hurdles in this battle.
And when it comes to the ransom, the survey shows 78% of SMBs in the B2B category have paid a ransom demand, while 63% of B2C SMBs have paid. Of those surveyed, 26% said they’ve never paid a ransom but 60% would do so if it meant getting their files back quickly. Further, 53% said they would pay ransom to protect company data.
Unfortunately, paying a ransom doesn’t guarantee complete data recovery, as 17% of survey participants indicated they recovered only some of their organization’s data after paying a ransom.
RELATED RESOURCE
2020 report: The threat posed by shadow IoT devices
Unsanctioned IoT devices open a portal for chaos across the network
The good news? Nearly 72% of respondents have a plan in place to mitigate ransomware attacks. As for the other 28%? These SMBs shared they have no plans geared toward mitigating a ransomware attack, consequently putting their organizations at significant risk. Fortunately, there are ways organizations can protect themselves from ransomware attacks.
“The best protection, of course, is prevention. And education is the key to its success,” said Reeder. “If something looks nefarious, it usually is. However, criminals are becoming increasingly sophisticated at making their attacks look legitimate. And again, at a time where people are in search of information and answers, the public’s fake-filters are at an all-time low.”
“Next, of course, are protection strategies,” Reeder added. “Picking up on a potential attack in advance is ideal to prevent it from happening. However, if an organization is compromised, near-immediate remediation is top priority – and it shouldn’t be in the form of paying a ransom.”
-
SecurityHQ names Aaron Hambleton as product and services chiefNews Industry veteran will lead product and service innovation across the provider's cybersecurity portfolio
-
Cisco teams up with DSIT to drive digital skills adoptionNews Partnership supports the government's TechFirst program to provide one million secondary school students with access to digital learning experiences
-
Ransomware cartels are fragmenting into volatile splinter groups, warns Met Police cyber chiefNews Commoditized "cyber crime bazaars" and AI data mining are forcing law enforcement to rewrite its playbook
-
New ransomware threat group, The Gentlemen, has become one of the most active ransomware operators, accounting for 10% of all attacksNews NTT researchers warn that the RaaS group is leveraging SystemBC malware to establish covert tunnelling, evade detection, and support rapid lateral movement across enterprise environments
-
Instructure chose to a pay ransom following the Canvas cyber attack – research shows more than half of security leaders would follow suitAnalysis Opting to pay ransoms creates huge risks for enterprises – you’re relying on the word of criminals
-
Ransomware negotiator sentenced for role in major cyber crime groupNews Deniss Zolotarjovs was a key player in a group associated with Conti
-
Threat actors ditch ‘spray and pray’ attacks in shift to targeted exploitationNews A dip in ransomware volumes points to a more targeted approach focused on vulnerability exploitation
-
Security leaders overconfident about ransomware recovery
News Few manage to recover all their data, and many experience business disruption
-
German authorities want your help finding the hackers behind GandCrab and REvilNews Daniil Maksimovich Shchukin and Anatoly Sergeevitsch Kravchuk are believed to have made millions from ransomware as a service schemes
-
The rise of teen hackers ‘makes for a good headline’, but cyber crime activities peak later in life
News With family responsibilities and mortgages to pay, it's not teenagers dishing out malware or carrying out cyber extortion
