During the analysis, the threat intelligence team disclosed that attackers not only encrypted files, but...

Double Extortion Ransomware:This type of ransomware not only encrypts files but also attempts to encrypt backups and shared, networked, and cloud drives1.

Attack Method:Attackers first exfiltrate sensitive data before encrypting it, then threaten to release the data if the ransom is not paid, hence the term 'double extortion’1.

Impact on Organizations:This method increases the pressure on the victim to pay the ransom, as they face the risk of their sensitive data being published or sold1.

Prevention and Response:Organizations should implement robust backup strategies, including offsite and offline backups, and have an incident response plan that includes dealing with ransomware and data breaches1.

Double extortion ransomware attacks are particularly dangerous because they combine the threat of data encryption with the threat of data exposure, significantly increasing the potential damage to the victim organization1.