This article has been reviewed according to Science X's editorial process and policies. Editors have highlighted the following attributes while ensuring the content's credibility:

fact-checked

trusted source

proofread

Researchers map decision-making processes of victims of ransomware

ransomware
Credit: Pixabay/CC0 Public Domain

University of Twente has investigated the decision-making processes of victims forced to pay ransom following ransomware attacks. UT researcher Tom Meurs and his colleagues analyzed data provided by the Dutch National Police and a Dutch incident response organization on 481 ransomware attacks.

They were able to show that organizations with recoverable backups were better able to avoid having to pay ransom. Data exfiltration led to higher ransom amounts paid. That was also the case for organizations insured against . The paper is available as a preprint.

The researchers used a two-step system: First, the victims decided whether or not to pay the ransom. Second, in the event they did decide to pay, they determined the amount to be paid. "Because we assess the two steps at the same time, the results are more reliable than previous scientific research into ransom payments."

Important insights

The investigation into 481 ransomware attacks submitted to the team by the Dutch National Police and a Dutch incident response organization has yielded a number of important insights. Insurance led to paid ransom amounts that were up to 2.8 times higher, without influencing the frequency of payments. Data exfiltration led to paid ransom amounts that were up to 5.5 times higher, without influencing the frequency of payments. Organizations with recoverable back-ups were up to 27.4 times less likely to pay the ransom compared to victims without recoverable back-ups.

"The insights emphasize the importance for policymakers to focus on areas such as data exfiltration, the role of insurance, and the promotion of recoverable back-ups. The implementation of recoverable back-ups is an effective technological strategy that helps stop criminals from removing back-ups while they infiltrate your systems," say the researchers.

More information: Paper: ris.utwente.nl/ws/portalfiles/ … ime2023vPREPRINT.pdf

Citation: Researchers map decision-making processes of victims of ransomware (2024, February 5) retrieved 15 April 2024 from https://techxplore.com/news/2024-02-decision-victims-ransomware.html
This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no part may be reproduced without the written permission. The content is provided for information purposes only.

Explore further

Some hackers take the ransom and run: researchers

1 shares

Feedback to editors