Extortion is the practice of obtaining something, especially money, through force or threats.
There are three main tactics behind cyber extortion: the threat of distributed denial of service (DDoS), the threat of data compromise and ransomware. Especially for organizations whose websites are revenue generating, these actors can cause enormous problems and their attacks can be very costly.
In this paper we will:
- Identify some of the most active extortion actors.
- Understand the motivations, tools and processes used by these actors.
- Compare and contrast different variants of ransomware.
- Learn how to prevent and mitigate these threats.