Remix.run Logo
▲ account42 6 hours ago

The point is that there are surely targets that are better funded and thus more likely to pay out large sums of money in order to fix things.

▲lxgr 6 hours ago | parent [-]

Definitely, but ransomware groups generally have incremental customer acquisition costs/margins that most other industries can only dream of. They'll encrypt first, ask questions/set prices later. The whole process might even be fully automated at this point, "thanks" to cryptocurrencies.

I remember hearing that they do have customer support, though! Not sure if you can escalate to a sales rep to get a personalized quote or non-profit discount from there.

▲exogenousdata an hour ago | parent | next [-]

Many companies now pay for this kind of insurance. So even though the company may not seem like they have the deepest pockets, it's really more about paying the insurance premiums and the insurer pays the ransom.

I recall a colleague whose firm was hit by a ransomware attack. When they reached out to the insurer and sent them the details of the attackers, the first response from the insurance agent was, "Oh good, they are a reputable group. We've worked with them in the past. They will simply take the ransom and return your network/files to you." My colleague was shocked by the nonchalance.

▲Geezus_42 6 hours ago | parent | prev | next [-]

I think Darknet Diaries talked about that. I don't remember what episode.

▲matkoniecz 6 hours ago | parent | prev [-]

> Not sure if you can escalate to a sales rep to get a personalized quote or non-profit discount from there.

some groups offer it (not out of goodness: rather on price discrimination grounds)