Latest Ransomware News and Trends
BackRansomware Incident Response Retained Services Unidecrypt Recon - Forensic Triage
BackAbout Us Press Industry News
Ransomware Recovery Blog
The Coveware team prides itself on keeping up-to-date, 24/7 with every aspect of ransomware and its possible threat to your business.
If you need immediate help with a specific ransomware strain, or are curious about the threat landscape of your industry, then let us know.
April 30, 2026
Patch management goes from hard, to ludicrous in the agentic AI era
April 30, 2026
The release of agentic AI is compressing the nature of patch management and how defenders must prepare for the future of cyber attacks. This is increasing pressure on patch velocity, compensating controls, and dependency visibility.
April 30, 2026
February 3, 2026
Why Zero-Day Downstream Mass Data Extortion Campaigns are Losing Their Bite
February 3, 2026
Are we seeing the extinction of mass data exfiltration campaigns? The stats demonstrate these attacks are losing their efficacy.
February 3, 2026
February 2, 2026
Nitrogen Ransomware: ESXi malware has a bug!
February 2, 2026
Nitrogen ransomware was derived from the previously leaked Conti 2 builder code, and is similar to Nitrogen ransomware, but a coding mistake in the ESXi malware causes it to encrypt all the files with the wrong public key, irrevocably corrupting them. This means that even the threat actor is incapable of decrypting them, and that victims that are without viable backups have no ability to recover their ESXi encrypted servers. Paying a ransom will not assist these victims, as the decryption key/ tool will not work.
February 2, 2026
November 19, 2025
Obscura Ransomware: A Case Study in Ransomware Data Loss
November 19, 2025
Discover how Obscura ransomware corrupts encrypted files beyond recovery, and why technical validation is key to smart ransom response decisions
November 19, 2025
October 24, 2025
Insider Threats Loom while Ransom Payment Rates Plummet
October 24, 2025
The percentage of companies choosing to pay ransoms dropped significantly, while threat actors shift their tactics in response to decreasing profits.
October 24, 2025
July 23, 2025
Targeted social engineering is en vogue as ransom payment sizes increase
July 23, 2025
Several ransomware groups used highly targeted social engineering tactics to create a major impact across several industry sectors in Q2 2025.
July 23, 2025
May 1, 2025
The organizational structure of ransomware threat actor groups is evolving before our eyes
May 1, 2025
The Ransomware-as-a-service (RaaS) model has not recovered from law enforcement disruption, and the entrance of novice actors along with non-Russian state-linked cybercriminals has led to uncertain outcomes for victims.
May 1, 2025
February 4, 2025
Will Law Enforcement success against ransomware continue in 2025?
February 4, 2025
2024 was a banner year for Law enforcement agency actions against ransomware and cybercrime groups. Will the new administration ensure this momentum continues?
February 4, 2025
December 3, 2024
Misleading Metrics: Unraveling Ransom Payment Statistics in Australia
December 3, 2024
A recent Australian Financial Review (AFR) article contained statistics about ransomware payment trends that require some deeper inspection.
December 3, 2024
November 1, 2024
Law enforcement doxxing raises risk profile for threat actors
November 1, 2024
In Q3 2024 Law enforcement actions disrupted infrastructure and publicized the identity of several prolific ransomware threat actors
November 1, 2024
July 30, 2024
Ransomware actors pivot away from major brands in Q2 2024
July 30, 2024
Unaffiliated ‘lone wolf’ threat actors carry out a greater share of attacks as they attempt to obfuscate their identity in Q2 2024.
July 30, 2024
April 17, 2024
RaaS devs hurt their credibility by cheating affiliates in Q1 2024
April 17, 2024
RaaS developers were caught cheating their affiliates, shaking the trust in the RaaS model following several high profile law enforcement actions.
April 17, 2024
January 26, 2024
New Ransomware Reporting Requirements Kick in as Victims Increasingly Avoid Paying
January 26, 2024
A lower percentage of ransomware victims are paying, as new regulations begin to elicit more and more public disclosure of ransomware incidents.
January 26, 2024
October 30, 2023
Scattered Ransomware Attribution Blurs Focus on IR Fundamentals
October 30, 2023
In Q3 2023 a series of ransomware attacks by similar threat actors created headlines and blurred the lines of attribution.
October 30, 2023
July 21, 2023
Ransom Monetization Rates Fall to Record Low Despite Jump In Average Ransom Payments
July 21, 2023
As ransomware affiliates are paid less frequently, they have adapted their strategies to compensate for the shifting dynamics of cyber extortion.
July 21, 2023
April 28, 2023
Big Game Hunting is back despite decreasing Ransom Payment Amounts
April 28, 2023
Ransomware threat actors are moving back up-market in search of lost profits as the cyber extortion economy seeks to halt its contraction.
April 28, 2023
January 20, 2023
Improved Security and Backups Result in Record Low Number of Ransomware Payments
January 20, 2023
Only 37% of ransomware victims paid a ransom in Q4, a record low as security and backup continuity investments pay off.
January 20, 2023
October 26, 2022
Uber Verdict Raises New Risks for Ransom Payments
October 26, 2022
The conviction of a high profile security executive who paid to suppress a data leak has created a new dimension of risk for security executives.
October 26, 2022
July 28, 2022
Fewer Ransomware Victims Pay, as Median Ransom Falls in Q2 2022
July 28, 2022
Ransomware actors became more fluid in Q2 2022 as attribution becomes harder, and fewer victims succumb to paying cyber criminals.
July 28, 2022
June 14, 2022
HSGAC Hearing Recap: Ransomware Attacks and Ransom Payments Enabled by Cryptocurrency
June 14, 2022
During a recent HSGAC hearing, Coveware had the opportunity to provide testimony on how ransomware attacks are impacting US companies, and the importance mandatory reporting.
June 14, 2022
May 3, 2022
Ransomware Threat Actors Pivot from Big Game to Big Shame Hunting
May 3, 2022
Less Victims of Ransomware are Paying, even as Cybercriminals Shift from Big Game to Big Shame Hunting
May 3, 2022
March 25, 2022
How the Russian/Ukraine war may lead to an explosion in Ransomware attacks
March 25, 2022
The long term impact of sanctions on Russian unemployment has the potential to increase the volume of future Ransomware attacks.
March 25, 2022
February 3, 2022
Law enforcement pressure forces ransomware groups to refine tactics in Q4 2021
February 3, 2022
Ransomware as a service groups are shifting their tactics as enterprises become harder targets, and law enforcement pressure mounts.
February 3, 2022
January 27, 2022
Ransomware as a Service Innovation Curve
January 27, 2022
As the Ransomware attacks continue, the direction and growth of the RaaS model is following a traditional innovation trajectory.
January 27, 2022
October 21, 2021
Ransomware attackers down shift to 'Mid-Game' hunting in Q3 2021
October 21, 2021
Ransomware attacks continued to proliferate in Q3 as governments and law enforcement ratchet up the pressure of the cyber extortion economy
October 21, 2021
July 23, 2021
Q2 Ransom Payment Amounts Decline as Ransomware becomes a National Security Priority
July 23, 2021
Ransomware payment amounts declined in Q2 as several high profile attacks escalated the attention of the US government and law enforcement.
July 23, 2021
June 24, 2021
What We Can Learn From Ransomware Actor "Security Reports"
June 24, 2021
Ransomware Actors Explain in their Own Words How to Become an Expensive Target through security reports written to victims.
June 24, 2021
April 26, 2021
Ransomware Attack Vectors Shift as New Software Vulnerability Exploits Abound
April 26, 2021
Ransomware attacks continued to proliferate in Q1 2021 as several common but unpatched software vulnerabilities created a fresh supply of compromised network access to ransomware affiliates.
April 26, 2021
February 23, 2021
Q4 2020 Doxxing Victim Trends: Industrial Sector Emerges as Primary Ransom “Non-Payor”
February 23, 2021
See how doxxing victims are distributed across industries, company sizes, and revenue tiers. Find Coveware’s data and analysis on doxxing trends in Q4.
February 23, 2021
February 1, 2021
Ransomware Payments Fall as Fewer Companies Pay Data Exfiltration Extortion Demands
February 1, 2021
Coveware’s Q4 Ransomware Report finds that fewer companies are paying criminal extortionists that are holding stolen data for ransom.
February 1, 2021
Jan 03, 2021Bill Siegel
Jan 03, 2021Bill Siegel
Why Small and Medium-Sized Professional Service Firms Are a Big Target for Ransomware Attacks
Jan 03, 2021Bill Siegel
Jan 03, 2021Bill Siegel
See the realities of ransomware attacks on small and medium-sized professional service firms and what factors lead to increased vulnerability.
Jan 03, 2021Bill Siegel
Jan 03, 2021Bill Siegel
Nov 04, 2020Quarterly ReportBill Siegel
Ransomware Demands continue to rise as Data Exfiltration becomes common, and Maze subdues
Ransomware attacks in Q3 2020 were marked by a larger reliance on stolen data. During the quarter, Maze sunset their operations while Ryuk restarted their campaign.
Oct 25, 2020Bill Siegel
Oct 25, 2020Bill Siegel
State and Local Cybersecurity: Defending Our Communities from Cyber Threats Amid COVID-19
Oct 25, 2020Bill Siegel
Oct 25, 2020Bill Siegel
Read Coveware’s prepared testimony on defending state and local organizations from ransomware.
Oct 25, 2020Bill Siegel
Oct 25, 2020Bill Siegel
Aug 03, 2020Quarterly ReportBill Siegel
Ransomware Attacks Fracture Between Enterprise and Ransomware-as-a-Service in Q2 as Demands Increase
During the first quarter of 2020 ransomware threat actors took advantage of the economic and workplace disruption caused by the COVID-19 outbreak. A proliferation of new variants were observed as some regular ransomware types began to fade. Read on!
Jul 20, 2020Bill Siegel
Jul 20, 2020Bill Siegel
Managed Service Providers: Still Not Appreciating the Risk of Ransomware
Jul 20, 2020Bill Siegel
Jul 20, 2020Bill Siegel
Ransomware attacks against MSPs increase the blast radius of the attack to every downstream client endpoint. We coordinated a survey with NinjaRMM to determine if MSPs are considering this risk correctly.
Jul 20, 2020Bill Siegel
Jul 20, 2020Bill Siegel
Apr 29, 2020Quarterly ReportBill Siegel
Ransomware Payments Up 33% As Maze and Sodinokibi Proliferate in Q1 2020
Mar 18, 2020Bill Siegel
Mar 18, 2020Bill Siegel
Free Ransomware Help for Coronavirus Healthcare Providers
Mar 18, 2020Bill Siegel
Mar 18, 2020Bill Siegel
Coveware has teamed up with Emsisoft to offer free assistance to any frontline healthcare organization hit with ransomware during the Coronavirus pandemic.
Mar 18, 2020Bill Siegel
Mar 18, 2020Bill Siegel
Jan 23, 2020Quarterly ReportBill Siegel
Ransomware Costs Double in Q4 as Ryuk, Sodinokibi Proliferate
Ransom demands more than doubled between Q3 and Q4 of 2019, as multiple variants gained broader distribution amongst enterprises large and small.
Jan 10, 2020Bill Siegel
Jan 10, 2020Bill Siegel
The Marriage of Data Exfiltration and Ransomware
Jan 10, 2020Bill Siegel
Jan 10, 2020Bill Siegel
Ransomware and Data Exfiltration are being combined to further complicate the lives of victims. How will this new development shake out?
Jan 10, 2020Bill Siegel
Jan 10, 2020Bill Siegel
Jan 02, 2020Bill Siegel
Jan 02, 2020Bill Siegel
How the Ransomware Economy Has Grown
Jan 02, 2020Bill Siegel
Jan 02, 2020Bill Siegel
The ransomware cyber extortion economy has exploded over the last 2 years. How did we get here so fast?
Jan 02, 2020Bill Siegel
Jan 02, 2020Bill Siegel
Nov 21, 2019Bill Siegel
Nov 21, 2019Bill Siegel
Phantom Incident Scam Threatens Release of Corporate PII
Nov 21, 2019Bill Siegel
Nov 21, 2019Bill Siegel
Several new types of Phantom Incident Scams are trying to extort victims based on old social engineering tricks.
Nov 21, 2019Bill Siegel
Nov 21, 2019Bill Siegel
Nov 20, 2019Bill Siegel
Nov 20, 2019Bill Siegel
Reduce the Risk of Ransomware by 90%, for Free, in One Day
Nov 20, 2019Bill Siegel
Nov 20, 2019Bill Siegel
How to reduce the risk of a ransomware attack in a single day, at no additional cost by 90%.
Nov 20, 2019Bill Siegel
Nov 20, 2019Bill Siegel
Nov 01, 2019Quarterly ReportBill Siegel
Ransomware Payments Rise as Public Sector is Targeted, New Variants Enter the Market
Coveware’s Q3 2019 report aggregates ransomware statistics such as average demands, data recovery rates, and network attack vectors.
Oct 08, 2019Bill Siegel
Oct 08, 2019Bill Siegel
Ransomware Sentiment After a Summer of Headlines
Oct 08, 2019Bill Siegel
Oct 08, 2019Bill Siegel
Ransomware and media coverage of ransomware ran rampant over the summer of 2019. We break down prevailing sentiment with our views.
Oct 08, 2019Bill Siegel
Oct 08, 2019Bill Siegel
Aug 30, 2019Bill Siegel
Aug 30, 2019Bill Siegel
A Consumer’s Guide to Protecting Important Data From Ransomware
Aug 30, 2019Bill Siegel
Aug 30, 2019Bill Siegel
A guide for consumers that will help prevent data loss from ransomware or other threats. Follow this guide to ensure your data is preserved!
Aug 30, 2019Bill Siegel
Aug 30, 2019Bill Siegel
Jul 16, 2019Quarterly ReportBill Siegel
Ransomware Amounts Rise 3x in Q2 as Ryuk & Sodinokibi Spread
Coveware’s Q2 2019 Ransomware Marketplace report aggregates statistics such as cyber extortion demands, ransomware data recovery rates, and network attack vectors from ransomware attacks.
May 23, 2019Bill Siegel
May 23, 2019Bill Siegel
Sodinokibi Ransomware Poised to Impact Larger Enterprises
May 23, 2019Bill Siegel
May 23, 2019Bill Siegel
Sodinokibi Ransomware borrows TOR site features of GandCrab, and the large demands of Ryuk. Read our review to understand this new threat.
May 23, 2019Bill Siegel
May 23, 2019Bill Siegel
May 15, 2019Bill Siegel
May 15, 2019Bill Siegel
Sunlight for the Ransomware Data Recovery Industry
May 15, 2019Bill Siegel
May 15, 2019Bill Siegel
Dishonest data recovery firms are under scrutiny after recent reports exposed some deceptive business practices.
May 15, 2019Bill Siegel
May 15, 2019Bill Siegel
May 08, 2019Bill Siegel
May 08, 2019Bill Siegel
Decrypt GandCrab Ransomware. How to Recover GandCrab Encrypted Files
May 08, 2019Bill Siegel
May 08, 2019Bill Siegel
A step by step DIY guide of how to decrypt GandCrab ransomware encrypted files. This guide will help restore encrypted files.
May 08, 2019Bill Siegel
May 08, 2019Bill Siegel
May 02, 2019Bill Siegel
May 02, 2019Bill Siegel
Ransomware First Response Guide - What to do in the ‘Oh $#@t’ moment
May 02, 2019Bill Siegel
May 02, 2019Bill Siegel
A guide for companies on how to handle the first few minutes and hours after a ransomware attack is discovered.
May 02, 2019Bill Siegel
May 02, 2019Bill Siegel
Apr 25, 2019Bill Siegel
Apr 25, 2019Bill Siegel
How To Prevent Business Email Compromise and Wire Fraud
Apr 25, 2019Bill Siegel
Apr 25, 2019Bill Siegel
This guide to preventing business email compromise will help keep your organization safe from the most prevalent form of cyber theft
Apr 25, 2019Bill Siegel
Apr 25, 2019Bill Siegel
Apr 16, 2019Quarterly ReportBill Siegel
Ransom amounts rise 90% in Q1 as Ryuk increases
Q1 2019 Ransomware Marketplace report aggregates statistics such as ransom demands, data recovery rates and attack vectors from ransomware attacks
Apr 11, 2019Bill Siegel
Apr 11, 2019Bill Siegel
Decrypt Ryuk Ransomware. How to Recover Ryuk Encrypted Files
Apr 11, 2019Bill Siegel
Apr 11, 2019Bill Siegel
A step by step guide of how to decrypt Ryuk ransomware encrypted files. This guide will help remove the virus and restore encrypted files.
Apr 11, 2019Bill Siegel
Apr 11, 2019Bill Siegel
Apr 10, 2019Bill Siegel
Apr 10, 2019Bill Siegel
How to Save Ransomware Encrypted Files for Decryption
Apr 10, 2019Bill Siegel
Apr 10, 2019Bill Siegel
Learn how to properly preserve your ransomware encrypted files so that you can make a full recovery if a free decryption tool is published.
Apr 10, 2019Bill Siegel
Apr 10, 2019Bill Siegel
Mar 29, 2019Bill Siegel
Mar 29, 2019Bill Siegel
Ransomware Attackers turn to Google Ads after Dream Market Take Down
Mar 29, 2019Bill Siegel
Mar 29, 2019Bill Siegel
The Dream Market take down forced ransomware distributors to get creative in order to salvage active cyber extortions, after email addresses got abandoned.
Mar 29, 2019Bill Siegel
Mar 29, 2019Bill Siegel
Mar 21, 2019Bill Siegel
Mar 21, 2019Bill Siegel
Dharma ransomware recovery rates fall as ransom demands skyrocket
Mar 21, 2019Bill Siegel
Mar 21, 2019Bill Siegel
Dharma Ransomware is increasingly falling into the hands of less sophisticated threat actor groups. This has led to decreased recovery rates for victims.
Mar 21, 2019Bill Siegel
Mar 21, 2019Bill Siegel
Mar 13, 2019Alex Holdtman
Mar 13, 2019Alex Holdtman
Cr1ptT0r Ransomware Targets NAS Devices with Old Firmware
Mar 13, 2019Alex Holdtman
Mar 13, 2019Alex Holdtman
Cr1ptT0r ransomware is targeting unsupported firmware on internet connected NAS devices. Read how to decrypt Cr1ptT0r. Contact us for immediate help.
Mar 13, 2019Alex Holdtman
Mar 13, 2019Alex Holdtman
Feb 20, 2019Bill Siegel
Feb 20, 2019Bill Siegel
Ryuk Ransomware, Exploring the Technical and Human Connections
Feb 20, 2019Bill Siegel
Feb 20, 2019Bill Siegel
Coveware teamed up with McAfee ATR to analyze both technical and non-technical aspects of Ryuk Ransomware attacks.
Feb 20, 2019Bill Siegel
Feb 20, 2019Bill Siegel
Feb 13, 2019Bill Siegel
Feb 13, 2019Bill Siegel
Ransomware attack on MSPs exploits popular PSA/RMM Tool
Feb 13, 2019Bill Siegel
Feb 13, 2019Bill Siegel
Managed Service Providers have been attacked by ransomware that exploits their PSA/RMM tools and spreads GandCrab Ransomware.
Feb 13, 2019Bill Siegel
Feb 13, 2019Bill Siegel
Feb 05, 2019RemovalBill Siegel
Feb 05, 2019RemovalBill Siegel
GandCrab v5.1 Exploit Kit Distribution and TOR Site Features
Feb 05, 2019RemovalBill Siegel
Feb 05, 2019RemovalBill Siegel
A Coveware™ guide on the new ways GandCrab v5.1 ransomware attacks, how to use the decryption tool, and recover your data.
Feb 05, 2019RemovalBill Siegel
Feb 05, 2019RemovalBill Siegel
Jan 29, 2019Bill Siegel
Jan 29, 2019Bill Siegel
xDedic - Marketplace for Hacked RDP Credentials is Taken Down
Jan 29, 2019Bill Siegel
Jan 29, 2019Bill Siegel
In a coordinated action, international law enforcement agencies took down xDedic, a marketplace for buying and selling hacked RDP and server credentials. Read about how this take down will affect ransomware attacks in the future.
Jan 29, 2019Bill Siegel
Jan 29, 2019Bill Siegel
Jan 22, 2019Ransomware NewsQuarterly ReportAlex Holdtman
Coveware's 2018 Q4 Ransomware Marketplace Report
Coveware’s Q4 Global Ransomware Marketplace Report presents aggregated data points collected from cases handled during Q4 2018 to highlight observable trends. Learn more about the latest trends in ransomware.
Jan 18, 2019Bill Siegel
Jan 18, 2019Bill Siegel
Phobos Ransomware, A Combo of CrySiS and Dharma
Jan 18, 2019Bill Siegel
Jan 18, 2019Bill Siegel
New Phobos Ransomware is being distributed by an active Dharma crew. The attacks target RDP and use similar extortion tactics on victims. Learn more about this new threat.
Jan 18, 2019Bill Siegel
Jan 18, 2019Bill Siegel
[![What Is SamSam Ransomware and How to Recover and Remove It [Guide]](https://images.squarespace-cdn.com/content/v1/5ab16578e2ccd10898976178/1576161489147-LMVUYU756OHBKW23WUKF/What-Is-SamSam-Ransomware-and-How-to-Recover-and-Remove-It.png.png?format=750w)
](/content/blog/samsam-ransomware-recovery-removal-guide/index.html)
Jan 14, 2019Bill Siegel
Jan 14, 2019Bill Siegel
What Is SamSam Ransomware and How to Recover and Remove It [Guide]
Jan 14, 2019Bill Siegel
Jan 14, 2019Bill Siegel
Remove & Recover from SamSam ransomware ASAP. Protect your business and recover your files. Contact Coveware™ for a free consultation right now.
Jan 14, 2019Bill Siegel
Jan 14, 2019Bill Siegel
Jan 08, 2019Bill Siegel
Jan 08, 2019Bill Siegel
Don’t Become a Ransomware Target - Secure Your RDP Access Responsibly
Jan 08, 2019Bill Siegel
Jan 08, 2019Bill Siegel
Ransomware attacks via remote access are on the rise. Secure RDP now to protect your business. Coveware shares insights from helping ransomware victims.
Jan 08, 2019Bill Siegel
Jan 08, 2019Bill Siegel
Jan 07, 2019Bill Siegel
Jan 07, 2019Bill Siegel
CryptoMix Ransomware Exploits Child Cancer Crowdfunding
Jan 07, 2019Bill Siegel
Jan 07, 2019Bill Siegel
A recent CryptoMix Ransomware campaign is exploiting real crowdfunding sites set up to benefit children’s cancer treatment.
Jan 07, 2019Bill Siegel
Jan 07, 2019Bill Siegel
Jan 03, 2019Bill Siegel
Jan 03, 2019Bill Siegel
Ransomware, Hackers, and … Guarantees?
Jan 03, 2019Bill Siegel
Jan 03, 2019Bill Siegel
How use of ‘guarantee’ psychology impacts how companies recover from a ransomware attack.
Jan 03, 2019Bill Siegel
Jan 03, 2019Bill Siegel
Dec 20, 2018Ransomware NewsBill Siegel
Coveware Joins ‘No More Ransom’ Partner Organization
Coveware has joined the No More Ransom Organization along with other Cyber Security Companies and Law Enforcement Agencies. Learn how No More Ransom is making a difference!
Dec 19, 2018RemovalBill Siegel
Dec 19, 2018RemovalBill Siegel
Corporate Ransomware Response & Protection Best Practices
Dec 19, 2018RemovalBill Siegel
Dec 19, 2018RemovalBill Siegel
The comprehensive business guide to recovering from a ransomware attack that no disaster recovery plan should live without.
Dec 19, 2018RemovalBill Siegel
Dec 19, 2018RemovalBill Siegel
Dec 18, 2018DecryptionBill Siegel
How to Protect Your Business From Dharma Ransomware
Remove Dharma ransomware ASAP. Protect your business and recover your files. Contact Coveware™ for a free consultation right now.
Dec 13, 2018Ransomware NewsBill Siegel
Crypto-Extortion Email Scam Uses Bomb Threats & Bitcoin
A new email extortion scam threatens bomb detonation unless a bitcoin ransom is paid
Dec 11, 2018RemovalBill Siegel
Dec 11, 2018RemovalBill Siegel
Beware of Dishonest Ransomware Recovery firms
Dec 11, 2018RemovalBill Siegel
Dec 11, 2018RemovalBill Siegel
A recent sting operation exposed how data recovery firms compound the damage done by ransomware on victims.
Dec 11, 2018RemovalBill Siegel
Dec 11, 2018RemovalBill Siegel
Dec 06, 2018DecryptionBill Siegel
Ransomware Victims Hit By Abandoned Globelmposter TOR Site
Recent victims of Globelmposter have been directed to an abandoned TOR site, leaving them without options. How will these victims recover?
Nov 29, 2018Ransomware NewsBill Siegel
How OFAC Sanctions on SamSam Ransomware Impacts Future Victims
How the DOJ’s action against SamSam ransomware will affect any company that is attacked by Ransomware in the future.
Nov 26, 2018AttackBill Siegel
Nov 26, 2018AttackBill Siegel
Why New Dharma Ransomware is More Dangerous than ever
Nov 26, 2018AttackBill Siegel
Nov 26, 2018AttackBill Siegel
How does the new Dharma ransomware work and what to expect from the decryption and data recovery process? Read now to protect yourself from ransomware attacks.
Nov 26, 2018AttackBill Siegel
Nov 26, 2018AttackBill Siegel
Nov 14, 2018AttackBill Siegel
Nov 14, 2018AttackBill Siegel
No Malware necessary. Just malicious intent
Nov 14, 2018AttackBill Siegel
Nov 14, 2018AttackBill Siegel
A recent burst of ransomware attacks using off the shelf encryption software poses a new set of challenges.
Nov 14, 2018AttackBill Siegel
Nov 14, 2018AttackBill Siegel
Nov 09, 2018PreventionAlex Holdtman
5 Whys of Never Paying Ransomware
As the ‘Never Pay’ ransomware debate continues, we offer an interrogative point of view based on the 5 Whys method of root cause/effect dissection.
Nov 06, 2018AttackBill Siegel
Nov 06, 2018AttackBill Siegel
Nov 06, 2018AttackBill Siegel
Nov 06, 2018AttackBill Siegel
Recently, the town of West Hartford disclosed that they paid a $2,000 ransom to hackers who encrypted machines belonging to the town’s operational center.
Nov 06, 2018AttackBill Siegel
Nov 06, 2018AttackBill Siegel
Oct 23, 2018Ransomware NewsBill Siegel
Gandcrab developers show empathy towards Syrian ransomware victims
Gandcrab developers have released keys to all Syrian victims of their ransomware.
Oct 19, 2018PreventionBill Siegel
Ransomware targets your red-letter dates
Ransomware hackers know what dates on the calendar matter to your business… prepare accordingly.
Oct 16, 2018PreventionQuarterly ReportBill Siegel
Global Ransomware Marketplace Report - Q3 2018
Study ransomware data collected from actual cyber extortion cases handled and resolved by the Coveware cyber incident response team.
Oct 10, 2018DecryptionBill Siegel
Decrypting Gandcrab Ransomware: Payment and Recovery Guide
An overview of the decryptor tools and payment processes necessary to recover files from GandCrab Ransomware.
Oct 05, 2018Ransomware NewsBill Siegel
Ransomware Recovery at the Taxpayers’ Expense
Earlier this year, the city of Atlanta was struck with a crippling SamSam ransomware attack. The city lost critical functions for weeks…
Sep 27, 2018DecryptionBill Siegel
Decrypting Dharma Ransomware: Quick Recovery Guide
An overview of the two step decryptor tool process necessary to recovery files from Dharma Ransomware.
Sep 17, 2018Ransomware NewsBill Siegel
Forbes Recognizing The Work We Do For Small Businesses
Coverage in Forbes of how Coveware and our Partners help small businesses manage ransomware incidents.
Sep 14, 2018RemovalBill Siegel
Sep 14, 2018RemovalBill Siegel
Enough ransomware cautionary tales
Sep 14, 2018RemovalBill Siegel
Sep 14, 2018RemovalBill Siegel
Lessons learned from a small business that did not manage to recovery from ransomware.
Sep 14, 2018RemovalBill Siegel
Sep 14, 2018RemovalBill Siegel
Sep 11, 2018RemovalAlex Holdtman
Stop stockpiling cryptocurrencies for ransomware payments
CISOs: The top 4 reasons that stockpiling bitcoin is a bad strategy.
Sep 05, 2018RemovalBill Siegel
Sep 05, 2018RemovalBill Siegel
Ransomware Recovery: Don't Make Matters Worse
Sep 05, 2018RemovalBill Siegel
Sep 05, 2018RemovalBill Siegel
Healthcareinfosecurity (part of ISMG), with input from Coveware, wrote a great article on the impact of missteps in the ransomware incident process.
Sep 05, 2018RemovalBill Siegel
Sep 05, 2018RemovalBill Siegel
Aug 28, 2018RemovalBill Siegel
Aug 28, 2018RemovalBill Siegel
Ransomware Incident Response: Data & Process Driven
Aug 28, 2018RemovalBill Siegel
Aug 28, 2018RemovalBill Siegel
A recent disclosure to a state AG sheds light on how being data and process driven can make a bid difference during a a cyber extortion incident.
Aug 28, 2018RemovalBill Siegel
Aug 28, 2018RemovalBill Siegel
Aug 22, 2018RemovalBill Siegel
Aug 22, 2018RemovalBill Siegel
Ransomware Recovery Process: A Step By Step Guide
Aug 22, 2018RemovalBill Siegel
Aug 22, 2018RemovalBill Siegel
If attacked, immediately try finding a public decryption tool. If not available and you need to recover encrypted data, your next best bet is an assisted ransomware payment.
Aug 22, 2018RemovalBill Siegel
Aug 22, 2018RemovalBill Siegel
Jul 31, 2018RemovalBill Siegel
Jul 31, 2018RemovalBill Siegel
Jul 31, 2018RemovalBill Siegel
Jul 31, 2018RemovalBill Siegel
There is a major divergence when it comes to expectations and reality about the time it takes to pay for ransomware. Simply put, businesses have not planned this section of their disaster recovery.
Jul 31, 2018RemovalBill Siegel
Jul 31, 2018RemovalBill Siegel
Jul 26, 2018Removalransomware, MSPBill Siegel
Prospect clients with ransomware: A Case Study
A look at how one Coveware Partner has handled on-boarding new prospective clients with active ransomware cases.
Jul 23, 2018Ransomware NewsBill Siegel
Coveware Recognized on 2018 CRN Emerging Vendors List
The Channel has spoken! Coveware named to the CRN Emerging Vendor List. Read on…
Jul 20, 2018Attackransomware, extortionBill Siegel
New ransomware scam preys on 'touchy' topic
A ransomware-related scam is hitting individuals, and preys on an ‘touchy’ topic.
Jul 12, 2018Ransomware NewsBill Siegel
A recent example of commoditized ransomware with a reused bitcoin wallet shows what some cyber criminals have graduated from.
Jul 11, 2018Ransomware NewsBill Siegel
AT&T acquisition of AlienVault: Simplifying SMB Cybersecurity
How AT&T’s acquisition of AlienVault personifies a narrative shift regarding SMB’s and cyber security
Jul 03, 2018AttackBill Siegel
Jul 03, 2018AttackBill Siegel
Who is behind Ransomware? Part III
Jul 03, 2018AttackBill Siegel
Jul 03, 2018AttackBill Siegel
Who is behind the most sophisticated types of ransomware attacks and breaches?
Jul 03, 2018AttackBill Siegel
Jul 03, 2018AttackBill Siegel
Jun 26, 2018AttackBill Siegel
Jun 26, 2018AttackBill Siegel
Who is behind Ransomware? Part II
Jun 26, 2018AttackBill Siegel
Jun 26, 2018AttackBill Siegel
More sophisticated ransomware attacks involve social engineering, perimeter hacking or both.
Jun 26, 2018AttackBill Siegel
Jun 26, 2018AttackBill Siegel
Jun 21, 2018AttackransomwareBill Siegel
Who is behind different types of Ransomware attacks?
Jun 15, 2018Removalransomware, compliance, HIPAABill Siegel
HIPAA Compliance & the Ability to Settle Ransomware
The ability to settle ransomware quickly is a core HIPAA compliance capability.
Load More
No results found