Ransomware and the SMB
Unlike stolen goods, where criminals often have to reinvest in vehicles, technology and safe houses, cybercrime profits from anonymity and the ease of transfer [42]. The rapid rise of ransomware is also boosted by advances in cryptocurrency payment mechanisms that make it difficult for law enforcement to trace payments.
Ransomware attacks aren’t just costly to businesses: they wreak havoc on individuals, families and communities. They affect productivity and cause disruptions to critical services. They can lead to rework, supply chain delays, lost revenue, legal fees and security upgrades. They can also have an emotional impact, especially when the attacker demands a ransom.
A ransomware attack begins when an unsuspecting employee clicks on a malicious link, downloads a fake app or opens an attachment. Once a computer is infected, the malware takes over and encrypts data across the network, blocking access to it. The attacker then displays an on-screen message demanding a payment in exchange for the decryption key.
While all industries are at risk of ransomware, hackers typically target those with valuable or sensitive data. Education institutions are particularly susceptible, as they frequently have lax cybersecurity controls. Other targets include small and midsize businesses (SMBs), software development firms, health care organizations and manufacturers. Attacks spiked during the COVID-19 pandemic, as employees shifted work between personal and professional digital environments, exposing more vulnerabilities. In addition, many SMBs have insufficient resources to quickly detect and respond to an attack.