Data Loss Prevention Against Ransomware
- Date:June 29, 2022
- Tracy Kitten
- Report Details: 15 pages, 5 graphics
- Research Topic(s):
- Fraud & Security
- PAID CONTENT
Ransomware attacks pose increasing risk to financial services providers and the small businesses they serve. Consumers also are now more frequently targeted by ransomware attacks, as cybercriminals shift their focus toward less suspecting, and less protected, targets. Ransomware is an interesting type of malware attack, in that criminals gain profits by extorting funds directly from their victims rather than by extracting payouts via account takeovers or scams.
While takeovers and scams can be waged against targets in tandem with ransomware attacks, the primary means of profit come directly from the ransoms paid in exchange for the return of data or access to data encrypted by criminals. Sometimes the data is returned; sometimes it is not, regardless of whether a fee is paid. This report explores the challenges financial services providers face, not only when it comes to being attacked themselves, but in the counsel and education they offer to business customers and consumers about how to defend themselves against falling victim to a ransomware attack, how to protect data from being stolen, and how to recover the data should a ransomware attack prove successful. Data loss prevention is the focus, and for financial institutions and businesses, it begins with updated disaster recovery and business continuity planning.
Key questions discussed in this report:
- How should organizations of all sizes better address data loss prevention via disaster recovery and business continuity planning?
- What vulnerabilities in endpoint security and cyber-insurance protection are attackers exploiting as part of their ransomware attacks?
- Why is paying ransoms, even when data are “recovered,” continually putting businesses at risk and posing unique concerns for financial institutions and their small-business clients?
Cybersecurity & Infrastructure Security Agency, Department of Treasury, Federal Bureau of Investigation, Financial Crimes Enforcement Network
Interested In This Report
More Cyber Lessons for Digital Bankers: It’s All About Trust
Some banking customers just do not trust the internet and are not comfortable using it. They trust their banks, though, and this presents an enormous opportunity for FIs to engage ...
Targeting TikTok: Rising Geopolitical Tension Should Put FIs on Guard
As a bipartisan group of legislators tries to put TikTok out of business in the United States over its China-based ownership and sketchy history of leveraging user data, U.S.-based...
Ransomware Negotiation Market Landscape 2022
Ransomware negotiation providers play a pivotal role in aiding financial institutions in their recovery of stolen and/or encrypted data and in conducting post-attack forensics to h...