A report on ransomware from a cybercrime specialist at the Dutch police. Sadly, in Dutch, but Google Translate makes it reasonably understandable:
Some highlights:
- Companies with a cyber insurance are asked higher ransoms. Not clear who pays it - they victims or the insurance company.
- Trade, construction, and the ICT sector (whatever that is) are targeted most often.
- Most companies have no option but to pay. In 5% of the cases the company could recover by other means but chose to pay nevertheless, because it was faster and cheaper. In the remaining 95% the only alternative to not paying was bankruptcy. But sure, let's make ransom payments illegal...