The small and medium business (SMB) community is no stranger to ransomware attacks. A recent report revealed that hackers have targeted 46% of SMBs, with 73% of those companies paying the ransom.
The report is based on a survey of more than 500 C-level executives. Of those surveyed, 87% were CEOs and the rest were CIOs and CTOs.
“Ransomware is not a new phenomenon,” said Russell P. Reeder, CEO of Infrascale. “However, it is surprising how many businesses are unprepared for a ransomware attack. It is shocking that during a time in which the world should be coming together in the fight against COVID-19, criminals are preying on unsuspecting people and organizations for personal – usually financial – gain. And, in many cases, these bad actors are actually benefiting.”
“With appropriate strategies using preventative measures like internet security and education, and protection measures like data backup and disaster recovery, you should never have to worry about paying ransomware,” he continued.
While 83% of SMBs said they felt prepared for a ransomware attack, 17% of the SMBs participating in the survey shared they didn't feel their organization was prepared for a ransomware attack. The SMBs that felt unprepared to go head to head with ransomware attackers indicated time and resources were their biggest hurdles in this battle.
And when it comes to the ransom, the survey shows 78% of SMBs in the B2B category have paid a ransom demand, while 63% of B2C SMBs have paid. Of those surveyed, 26% said they’ve never paid a ransom but 60% would do so if it meant getting their files back quickly. Further, 53% said they would pay ransom to protect company data.
Unfortunately, paying a ransom doesn’t guarantee complete data recovery, as 17% of survey participants indicated they recovered only some of their organization’s data after paying a ransom.
RELATED RESOURCE
2020 report: The threat posed by shadow IoT devices
Unsanctioned IoT devices open a portal for chaos across the network
The good news? Nearly 72% of respondents have a plan in place to mitigate ransomware attacks. As for the other 28%? These SMBs shared they have no plans geared toward mitigating a ransomware attack, consequently putting their organizations at significant risk. Fortunately, there are ways organizations can protect themselves from ransomware attacks.
“The best protection, of course, is prevention. And education is the key to its success,” said Reeder. “If something looks nefarious, it usually is. However, criminals are becoming increasingly sophisticated at making their attacks look legitimate. And again, at a time where people are in search of information and answers, the public’s fake-filters are at an all-time low.”
“Next, of course, are protection strategies,” Reeder added. “Picking up on a potential attack in advance is ideal to prevent it from happening. However, if an organization is compromised, near-immediate remediation is top priority – and it shouldn’t be in the form of paying a ransom.”
-
Prolific ransomware operator added to Europe’s Most Wanted list as US dangles $10 million rewardNews The US Department of Justice is offering a reward of up to $10 million for information leading to the arrest of Volodymyr Viktorovych Tymoshchuk, an alleged ransomware criminal.
-
Jaguar Land Rover “did the right thing” shutting down systems to thwart cyber attackNews The attack on Jaguar Land Rover highlights the growing attractiveness of the automotive sector
-
Ransomware attack on IT supplier disrupts hundreds of Swedish municipalitiesNews The attack on IT systems supplier Miljödata has impacted public sector services across the country
-
A notorious hacker group is ramping up cloud-based ransomware attacksNews The Storm-0501 threat group is refining its tactics, according to Microsoft, shifting away from traditional endpoint-based attacks and toward cloud-based ransomware.
-
Security researchers have just identified what could be the first ‘AI-powered’ ransomware strain – and it uses OpenAI’s gpt-oss-20b modelNews Using OpenAI's gpt-oss:20b model, ‘PromptLock’ generates malicious Lua scripts via the Ollama API.
-
Data I/O shuts down systems in wake of ransomware attack
News Regulatory filings by Data I/O suggest the costs of dealing with the attack could be significant
-
Average ransom payment doubles in a single quarterNews Targeted social engineering and data exfiltration have become the biggest tactics as three major ransomware groups dominate
-
BlackSuit ransomware gang taken down in latest law enforcement sting – but members have already formed a new groupNews The notorious gang has seen its servers taken down and bitcoin seized, but may have morphed into a new group called Chaos
