Previous All Posts Next

Hacked? Why You Should Never Pull Out the Knife

Posted: October 11, 2017 to News.

Tags: Ransomware, Malware, Data Breach

If you’ve seen any action movies, then you’ve seen it before. The hero is stabbed or impaled and left for dead by the bad guy, but somehow, they gather enough will to live to pull out whatever is inside them and save the day. That’s the movie version. In real life though, when someone is stabbed the last thing you want to do is pull the knife out because not only will the knife do more damage on the way out but it will also open the wound. Which means the person has a much greater chance of bleeding to death. Just like being stabbed, low level ransomwares can be stopped if you know what to do right after you’re infected, but if you have no idea what to do and just do the first thing that comes to mind like paying the ransom (A.K.A pulling the knife out) then you might do more damage than good. In 2016 a ransomware called Jigsaw began popping up on cybersecurity experts' radars. The malware got its name because the screen that pops up after the data has been encrypted has a picture of the puppet from the Saw films along with a message saying to pay .04 Bitcoins ($150) within an hour or thousands of your files will be deleted and every hour after that thousands more will be deleted. If you try and restart your computer, then, you guessed it, another thousand files will be deleted. If you haven’t heard of Jigsaw, then you’re probably wondering why such a malicious malware hasn’t been in the news. The answer is because the designers made it so poorly that there are now multiple ways to beat it. Imagine though, that you’re a scared employee or the first time you ever heard of ransomware was when Jigsaw took over your computer. You might do something like pay the ransom, which in this case is the same thing as pulling the knife out thinking you’re helping. Not only are you losing money, but there is no guarantee that the hackers will give you back your data or that they even have it. At the RSA security conference in San Francisco this month, James Lyne, the global head of security research at Sophos Labs, said that more and more ransomwares are including timers like Jigsaw or some even shred the files without telling the victim and still asking for the ransom. Last year Ranscam was one of these ransomware variants. Like a regular ransomware, Ranscam demand a ransom, but even then it was too late because the files had already been destroyed and were impossible to recover. Security experts believe that the hackers behind Ranscam simply didn’t care to decrypt the data, so they deleted it and hoped to get their ransom. Just like Jigsaw, there’s no reason to pay a ransom to Ranscam. Unfortunately, if it’s on your screen then your files are already gone, but you can save yourself the frustration of paying the ransom and getting nothing in return by investing in your cybersecurity knowledge. Simply reading a cybersecurity blog could save you time and money in the future. Take Jigsaw for example. If you don’t know about it then you’ll feel pressured by the ticking clock to pay the ransom, but just a little bit of cybersecurity awareness would save you from pulling the knife out and paying the ransom. You don’t even need to be an expert to save yourself from making these mistakes. Simply knowing who to contact and what to tell them after you’ve been attacked can be the difference between a scare and an attack. Invest in your cybersecurity awareness and stop yourself from pulling out the knife.

Protect Your Business Today

Petronella Technology Group has provided cybersecurity, compliance, and managed IT services from Raleigh, NC for over 23 years. Contact us today for a free consultation and technology assessment.

Need help implementing these strategies? Our cybersecurity experts can assess your environment and build a tailored plan.
Get Free Assessment

About the Author

Craig Petronella, CEO and Founder of Petronella Technology Group
CEO, Founder & AI Architect, Petronella Technology Group

Craig Petronella founded Petronella Technology Group in 2002 and has spent more than 30 years working at the intersection of cybersecurity, AI, compliance, and digital forensics. He holds the CMMC Registered Practitioner credential (RP-1372) issued by the Cyber AB, is an NC Licensed Digital Forensics Examiner (License #604180-DFE), and completed MIT Professional Education programs in AI, Blockchain, and Cybersecurity. Craig also holds CompTIA Security+, CCNA, and Hyperledger certifications.

He is an Amazon #1 Best-Selling Author of 15+ books on cybersecurity and compliance, host of the Encrypted Ambition podcast (95+ episodes on Apple Podcasts, Spotify, and Amazon), and a cybersecurity keynote speaker with 200+ engagements at conferences, law firms, and corporate boardrooms. Craig serves as Contributing Editor for Cybersecurity at NC Triangle Attorney at Law Magazine and is a guest lecturer at NCCU School of Law. He has served as a digital forensics expert witness in federal and state court cases involving cybercrime, cryptocurrency fraud, SIM-swap attacks, and data breaches.

Under his leadership, Petronella Technology Group has served 2,500+ clients, maintained a zero-breach record among compliant clients, earned a BBB A+ rating every year since 2003, and been featured as a cybersecurity authority on CBS, ABC, NBC, FOX, and WRAL. The company leverages SOC 2 Type II certified platforms and specializes in AI implementation, managed cybersecurity, CMMC/HIPAA/SOC 2 compliance, and digital forensics for businesses across the United States.

CMMC-RP NC Licensed DFE MIT Certified CompTIA Security+ Expert Witness 15+ Books
Related Service
Need Cybersecurity or Compliance Help?

Schedule a free consultation with our cybersecurity experts to discuss your security needs.

Schedule Free Consultation
Previous All Posts Next
Free cybersecurity consultation available Schedule Now