Tag Archive for: cybersecurity

Partnering for Protection : Vectra AI x Trinsio

Partnering for Protection : Vectra AI x Trinsio

In today’s digital landscape, cyber threats are ever-evolving and can pose a serious threat to businesses of all sizes. To combat these risks, it’s crucial to invest in advanced security solutions that can detect and prevent cyber attacks before they cause significant damage.

What makes Vectra’s Cyber Security Platform unique? Why should I buy it?

Vectra’s Cybersecurity Platform is unique because it uses artificial intelligence (AI) to detect and respond to cyber threats in real-time. The platform leverages machine learning and behavioral analytics to detect and prioritize threats that other security solutions may miss, providing better protection for organizations.

 

Some key features and benefits of Vectra’s Cybersecurity Platform:

Automated Threat Detection: The platform uses AI to automate threat detection and analysis, reducing the need for manual intervention and providing faster response times to threats.

Real-time Visibility: Vectra’s platform provides real-time visibility into network traffic, detecting and prioritizing threats as they occur, allowing security teams to respond proactively.

Contextual Awareness: The platform uses AI to build a comprehensive understanding of an organization’s network, enabling it to detect and respond to sophisticated attacks that may involve multiple stages and tactics.

Continuous Monitoring: Vectra’s platform continuously monitors an organization’s network, identifying potential threats and vulnerabilities, providing early warning signs and reducing the likelihood of successful cyberattacks.

Scalability: The platform is designed to scale with an organization’s needs, enabling it to protect large and complex networks, from small businesses to large enterprises.

 

Trinsio

At Trinsio, we provide technology solutions to businesses of all sizes. With our wide range of solutions, we help organizations improve their operational efficiency and enhance their cybersecurity posture. We partner with best-in-class technology providers like Vectra AI to ensure that you can have access to the latest and most advanced solutions available.

 

Vectra AI x Trinsio

The dynamic duo, Vectra AI and Trinsio, is a game-changer for all those seeking to improve their security posture. Together, we offer cities, counties, businesses and organizations the peace of mind that comes with knowing that your network stays secure and your business stays protected.

When Trinsio Met ThreatBlockr

When ThreatBlockr Met Trinsio…

ThreatBlockr, an industry innovator committed to protecting companies and organizations against all cyber attacks using an active defense cybersecurity platform, has entered into a strategic partnership with Trinsio, a cybersecurity company specializing in data management solutions including data backup and recovery. Together, this new partnership will provide enterprise-level data backup, recovery, management, disaster recovery, and other preventative cyber security solutions for the small to mid-sized business market.

Mark Massey, Trinsio’s Co-Founder, said, “We recognize the world is evolving rapidly and threats abound. We are excited about our future with ThreatBlockr… their technology will play a key role in delivering preventative solutions to our customers and those that recognize the threats that face each and every organization globally.”

“Our mission at ThreatBlockr is to enable all companies to Block Every Threat in an easy, open, and automated way. Trinsio will help us to fulfill this mission and provide all companies – regardless of size, that opportunity.” Brian McMahon, CEO, ThreatBlockr.

Lane Livingston, the CTO, and Co-Founder at Trinsio, said, “We are excited to be working with ThreatBlockr. The technology they offer is unmatched. It looks at well over 1 million parameters in real time without adding latency. Far exceeding the current industry offerings. As we collaborate and work together, we can now offer this great technology to companies and organizations of all sizes… it is a real game changer.”

Our world is more technologically reliant than ever before, and that will not be changing anytime soon. Whatever business or organization you work for, chances are, you rely on computer systems every day. Business leaders can no longer rely on out-of-the-box defense systems as cyber criminals are becoming more intelligent and more effective. You need to be actively defending your critical data and information. Trinsio and ThreatBlockr are here to help you do exactly that. Protect your business and rest easy despite the odds.

About ThreatBlockr: Headquartered in Tysons Virginia, and founded in 2012, ThreatBlockr’s patented solution blocks known threats from ever reaching customers’ networks. ThreatBlockr utilizes immense volumes of cyber intelligence from over 50 renowned security vendors to provide unparalleled visibility over the threat landscape resulting in a more efficient and effective security posture. 

About Trinsio: Headquartered in Orem, Utah, and founded in 2020, Trinsio brings over 30 years of experience in all things data management, including cloud, data center colocation, and telecommunications. They have tailored their solutions to bring enterprise-level solutions, including data backup, recovery, management, and disaster recovery solutions, to customers of any size. Trinsio’s data solutions address premise, cloud, and long-term storage.

Ransomware Attack in New Mexico: A ‘Gut-Check’ for Local Government Entities

Ransomware Strikes New Mexico

On January 5, 2022 between Midnight and 5:30 a.m. ransomware struck Bernalillo County in New Mexico. The Albuquerque Journal reported that the attack affected “a wide variety of county government operations. Most county buildings were closed” which halted many of the counties operations.

All Bernalillo County websites were offline as a result of the cyber attack which made working with the public very difficult, but most concerning was the way the county-operated jail was affected. Government officials were unable to access cameras which caused inmates to be temporarily limited to their cells. Inmates were also reduced in their access to telephones, tablets, and unable to have visitors. The facility was on lockdown for several days following the attack. 

Bernalillo County was not the first Ransomware attack on a local government entity and certainly will not be the last. These ransomware attacks are frequent and not only disrupt government services but can also compromise data and have significant impacts on local communities.

Ransomware Attacks Targeting Local Government Entities

According to The Washington Post, “in 2019, cybersecurity experts noticed a significant increase in ransomware attacks on municipalities, cities, and towns across the country and these attacks continue to trend upward. Cyber criminals target local governments because oftentimes these organizations have limited personnel, equipment, budget, and resources to devote to cybersecurity. 

The FBI has said concerning the matter that local government entities will continue to experience ransomware attacks. Especially as “deployment and targeting tactics evolve, further endangering public health, safety, and resulting in significant financial liabilities.”

Is your City/State/Municipality Prepared?

Months later, Bernalillo County continues to feel the effects of this ransomware attack. This devastating attack certainly serves as a gut check for other local government entities. Are you prepared to withstand a ransomware attack? Do you have a data backup strategy in place? Are your employees adequately informed and understand the risks/vulnerabilities?

ENSURE you are SECURE

Trinsio is a data backup solution that will ensure that your data is secure. As a Rubrik strategic partner, Trinsio offers top-of-the-line technology for a fraction of the cost. Trinsio understands that your small town is important to you & will help you first, to understand your data, and then create a plan to protect it.

Ransomware: “It won’t happen to me…” until it does

With ransomware, it is easy to assume, “it won’t happen to me” until it does. Dr. William Scalf and Dr. John Bizon became victims of this horrific cybercrime in March of this year. The two doctors own a small medical office in Battle Creek Michigan that has been operating for many years. Upon return from a vacation, Dr. Scalf found all computers shut down with patient information, schedules, and records seized. There was a single email requesting a sum of money in exchange for the stolen information.

The ENT and Hearing Specialist informed the FBI as soon as they could, where they were encouraged to do everything they could to not pay the ransom, as this only encourages criminal behavior. There is also a risk in paying the ransom because there is no guarantee that their data would be completely recovered. Rather than paying the ransom, the two doctors decided after a long career, the only option was to shut down the practice completely. Dr. Scalf describes the situation as a nightmare. Brookside ENT could not even inform the patients of the event that occurred because all contact information was lost. Patients were frustrated as they tried to schedule appointments only to find out that the practice had shut down.

Unfortunately, this small practice in Battle Creek Michigan is not and will not be the only small business to be affected by ransomware. In a report by Beazley Breach Briefing, a software insurance agency, 3,300 ransomware attacks were reported against U.S. businesses in 2018 and 71% of these attacks were against small businesses or organizations. 

Healthcare Industry at High-Risk for Ransomware Attacks

The healthcare industry is definitely an industry that cybercriminals are taking advantage of. Healthcare providers are oftentimes more likely to pay the ransom because people’s lives could be in jeopardy if the information is lost. According to HealthITSecurity, small healthcare facilities are also targeted because of their “lean security support.” Data shows 3 out of 4 small to mid-sized healthcare centers lack an on-staff IT security leader leaving cybercriminals a greater opportunity to successfully complete an attack.

Although oftentimes we hear about large enterprises falling victim to devastating ransomware attacks, it is important to consider the opportunity cybercriminals see within small businesses and organizations. Because small businesses are not typically equipped with the resources to withstand an attack, they can be the prime target for an attacker. Without a data recovery plan in place, many small businesses end up paying the ransom out of sheer desperation in hopes of getting their data back. The effects of these attacks are devastating and can lead to the complete shutdown of an organization, just as it did with Brookside ENT.

Trinsio Can Help Protect Your Business Against Ransomware

As small businesses and organizations develop a data backup and management plan, they may struggle to find a good solution because they do not have the budget or may be overwhelmed by their data and have no idea where to begin. Trinsio understands this concern and has developed a way to solve this problem. With immutability to fight ransomware, you can be confident that your data will be protected in the event of an attack, we will also walk with you step by step to understand your data and present the best strategy to manage it. As a Rubrik Strategic Partner, we offer the best data backup and recovery technology that is available. And with a monthly ‘pay as you go’ model, our technology is affordable and available to protect your organization.

I’ve Been Hit by Ransomware… What Now?

In an article titled “Best practices to remediate a ransomware attack” published through Business & Finance, Filip Verloy, Field CTO EMEA of Rubrik says, “As the use of remote working rises, so do potential threats and vulnerabilities, especially within a smaller business which might not have stringent home working security measures in place. People have been forced to adopt new ways of working at an accelerated pace.” Verloy states the importance of protecting your company from cyberattacks that could come as a result of remote working. He advises every company to “create a ‘work from home guide’ for employees, explain which tools are ok, what basic security measures are expected, and who is responsible for implementing them.”

The FBI has estimated that ransomware will be a $1 billion market in 2021. If a company or organization is not prepared, they may feel that paying the ransom is their only option. The recovery process can be very difficult because it is both expensive, and there is no guarantee you’ll get all your files back. Waiting until you fall victim to a cyberattack in order to develop a data recovery plan is not effective and can be detrimental to your business. It is important to decide now on a backup and recovery solution to ensure your data is secure.

Business & Finance published “Best practices to remediate a ransomware attack” to help you develop your ransomware remediation plan just in case an attack occurs.

You Have Been Hit by Ransomware – What Now?

1. Isolate the infected station from the network.

This is done to prevent the infection from spreading to other devices. Disconnect the network cable, WiFi, USB’s, etc. and turn the power off the affected devices to try and contain the damage.

2. Ensure backups have not been compromised.

Be sure backup data is not in read/write mode because it can be manipulated or deleted by the attacker.

3. Identify the infection.

Ask yourself the following questions: What kind of ransomware are you facing? How did it enter your system? Phishing scam? Stolen user credentials?

4. Determine your options.

There are several options available as you try to recover from an attack: pay the ransom, try to remove the malware, and recover from backups. Unfortunately, paying a ransom does not guarantee the recovery of all your data, and may encourage the attacker further because their attack was successful. Trying to remove the malware has become increasingly difficult as ransomware has become more sophisticated and mutates frequently. If you have a robust backup system, you should be able to restore all data from the most recent backup without paying the ransom.

After you have taken these steps, be sure to notify your team, discover which files are corrupted, restore your files, and inform law enforcement, customers, and other authorities. 

How to Prepare

One of the best ways to prepare for a ransomware attack is to make sure your data is backed up in multiple places. Joel Witts with Expert Insights said, “In the event of a ransomware attack, backing up data means you will be able to mitigate the loss of any encrypted files and regain functionality of systems.”

Trinsio offers full-featured, Rubrik-powered data management with global searchability, instant recovery, and data immutability. We also offer local and cloud data replication to be sure your data is secure. With more than 30+ years of experience in cloud, data center colocation, and communications, Trinsio can provide you with a solution you can trust.

Rubrik Announces Expansions to Service Polaris During Digital Forward Summit

On Monday Rubrik held the Rubrik Forward Digital Summit. More than 7,500 registered attendees from 81 different countries joined CEO and Co-founder Bipul Sinha, President of Rubrik, Dan Rogers, comedian Hasan Minhaj, and others to celebrate the innovations in data management technology. 

Dan Rogers said about Rubrik’s new innovations: “With the innovations we announced at Forward, Rubrik has taken another leap in maximizing value for our customers. We changed the game in backup and recovery with our automated SLA engine, near-instant recovery, and converged software fabric. Now, we’re extending that to dramatically, simplify management of popular workloads on Amazon Web Services, Google Cloud Platform, and Microsoft Azure.”

Most notable among the announced innovations were the above-mentioned expansions to Rubrik Polaris. Launched a little over two years ago, Polaris provides a way to centralize, organize, and manage all data across cloud platforms and data centers. Since the launch, Rubrik continues to expand services available under the Polaris umbrella, with expansions to its public cloud coverage.

Protection for Google Cloud Platform (GCP) Virtual Machines

Similar to Rubrik’s solution for Azure and Amazon Web Services, GCP Virtual Machine Protection brings enterprise-level data protection to Google Cloud Platform Virtual Machines. Polaris GCP Protection provides added protection to cloud services without added complexities from infrastructure and maintenance. Now organizations can recover even the most complex data in minutes.

Frederic Lhoest, Senior Technology Architect at PCCW Global shared his experience with Rubrik’s new GCP protection, “Rubrik’s native protection for Google Cloud Platform (GCP) will modernize the protection of our cloud-native applications, extending the same simplicity of our on-prem environment into the cloud. By employing the same SLA policies to automate data protection across our hybrid cloud, we will no longer have to dedicate time to manage our backups. Rubrik’s solution will increase our operational efficiency and allow us to focus on what matters the most – our customers.” 

Protection for Amazon Relational Database Service (RDS)

Rubrik is expanding its protection to AWS Relational Database Services, increasing the availability of RDS users’ applications, across all availability zones and for all instance types. Additionally, Rubrik has simplified the setup, with only a 2-step process between the user and auto-discovery of instances across the service. 

Protection for Microsoft 365 OneDrive

Rubrik is also expanding its existing protection to Microsoft 365 OneDrive by offering more granular restore options–file- and folder-level recoveries–on OneDrive with Polaris. This will give organizations further control over their data and minimize data loss. About this James Cuneo, Senior Systems Engineer at BMD Group, said, “As a leader in the construction industry, our field employees rely on portable tablets to stay connected and manage projects. Those tablets can be lost, stolen, and are subject to wear and tear, so it’s critical that data is easily recoverable. Rubrik’s protection for Microsoft OneDrive will offer us peace of mind; we’ll know that our data is safe, secure, and easily accessible in the event of data loss. Rubrik’s approach to Microsoft OneDrive will be a game-changer; it will amplify our data leverage and safeguard our data so that it never leaves our cloud account. This will be critical to uphold compliance and will make file-level search and recovery a breeze.”

Metadata is the New Data

Also prevalent during the presentations at Rubrik’s Forward Digital Summit was the discussion about the importance of metadata. During one of the keynote talks, Bipul Sinha said, “Data is eating the world. Data is how businesses are thinking about how to create an advantage in the market. People are predicting within 10 years we will have 50 billion devices generating 175 zettabytes of data…Rubrik helps organizations leverage their backup data to address some of today’s biggest business challenges, such as responding to cyberattacks and staying ahead of data privacy regulations. These organizations will outpace the competition in the World of the Data-Forward Enterprise.”

Research from International Data Corporation (IDC) confirms what Sinha was arguing. Today 45.7% of organizations are not extracting all the possible metadata from their data due to data management defects. IDC also has found that organizations with formal plans to leverage the data as a competitive advantage had eight times the growth rate and doubled their profitability compared to those that did not. 

Rubrik’s focus on leveraging the metadata to help customers make informed decisions about their organization’s data has set them apart from its competitors and is just one of the reasons that they’ve experienced such rapid growth since their beginnings. 

For more information about Rubrik Polaris, click here.

Advice from Microsoft: Blocking Ransomware Attacks

We have seen lots of changes in businesses due to the COVID-19 pandemic. As most companies are converting to a remote workforce, we have seen human-operated ransomware campaigns targeting healthcare organizations and critical services. To prevent these attacks, Microsoft “advises potential victims to prevent threat actors behind ransomware campaigns from being able to exploit the weaknesses they usually abuse to launch their attacks.”

Microsoft encourages companies to do several things to reduce the risk of becoming a victim of a ransomware attack. The Microsoft Threat Protection Intelligence Team says, “Applying security patches for internet-facing systems is critical in preventing these attacks.” As they have researched data about recent ransomware attacks they have found the following security gaps or common ways attacks infiltrate systems: 

  1. Remote Desktop Protocol (RDP) or Virtual Desktop endpoints without multi-factor authentication (MFA);
  2. Older platforms that have reached end of support and are no longer getting security updates; and
  3. Misconfigured web servers, including IIS, electronic health record (EHR) software, backup servers, or systems management servers.

Organizations should be looking for signs of an active ransomware attack and if they find any signs, Microsoft encourages people to take the following actions:

  1. Investigate affected endpoints and credentials,
  2. Isolate compromised endpoints, and
  3. Inspect and rebuild devices with related malware infections.

To help people understand just how detrimental a ransomware attack can be, Microsoft reported that “after analyzing collected cryptocurrency wallets and ransomware ransom notes, the FBI said at this year’s RSA security conference that victims paid more that $140 million to ransomware operators during the past six years.” It is important for your business to be informed of the possible ways you may be at risk of a ransomware attack. 

Microsoft wants you and your company to be safe from the detrimental effects of ransomware.

You are the Problem: How the Misinformed are Bankrolling Hackers

I recently talked with a friend about using anti-virus software. The topic of conversation was ransomware and how we could protect ourselves against it. When I suggested he try some free antivirus software, his response was surprising to me: “I don’t believe in that stuff.” He explained that he didn’t understand the software and didn’t believe it did anything truly useful. Sadly, this has become the opinion of the average person (1): bias against this kind of technology simply because they understand little about it. This “attitude of ignorance,” however, is hurting those same people who employ it. Because of their ignorance, people and organizations are unknowingly supporting the ransomware industry.

Those who choose to disregard ransomware and other cybersecurity threats as real threats will eventually find their computers hijacked and all their data encrypted, tricked by a specially-designed spam email or some other malicious ploy. It should be and is our job to build up defences against such attacks. By doing so we will be protecting ourselves and others around us.

The Economics of Ransomware 

Ironically, this is where the ransomware problem originates. Companies who, like my friend, disregard warnings to take action to protect their data are the ones who pay to get their data back when they eventually become victims. People with misinformation or no information unknowingly create a demand for ransomware by showing hackers that they are willing to pay the ransom. It is as simple as the economic principle of supply and demand—the more demand there is for a commodity, the more people are willing to pay a higher price for that commodity.

Victims are Reliably and Increasingly Paying Ransoms

What other factors are contributing to the demand for ransomware? Current cybersecurity research shows that hackers are becoming better at getting encrypted data back to the user after the user makes the ransomware payment. CyberEdge Group, a leading research and marketing company for the high-tech industry, reported that of the companies surveyed, the percentage that paid the ransom but still lost their data decreased almost 12%, from 50.6% to 38.8% (2). Other sources report that 22% of those surveyed never recovered their data (1). As hackers become more accurate decrypting user data, users are becoming more confident that they will get their data back if they pay the ransom. Consequently, users are more willing to pay to get their data back, and the data reflects that, with an increase in the number of organizations paying the ransom demand (2).

Like my friend, many users are grossly underprepared for malicious events. When an event does occur (to their surprise and chagrin), they are left with few options: either pay the hacker or permanently lose their data. However, most users do not realize that by paying the ransom the first time, they are inviting the hacker to come back again. Surprisingly, many victims are not just attacked once, but twice. Why would a hacker bother hitting someone multiple times? Under the false impression that a ransomware attack is a “one and done” situation, many do not make much more of an effort to increase their security infrastructure after the first attack. This idea is false because the hacker is now familiar with their system, and making a second attack is marginally easier. Additionally, once the attackers know the victim is willing to pay the ransom, there is no reason to find another source when revisiting the same victim means lower risk and lower costs.

[/et_pb_text][/et_pb_column][/et_pb_row][et_pb_row _builder_version=”4.4.2″][et_pb_column type=”4_4″ _builder_version=”4.4.2″][et_pb_image src=”https://trins.io/wp-content/uploads/2020/04/Petya.A-1.png” _builder_version=”4.4.2″][/et_pb_image][/et_pb_column][/et_pb_row][et_pb_row _builder_version=”4.4.2″][et_pb_column type=”4_4″ _builder_version=”4.4.2″][et_pb_text _builder_version=”4.4.2″]

Ransomware Operators are Making a Killing

When a hacker is paid, they gain the cash flow to support additional attacks, leading to more victims, which leads to more cash flow—and the cycle perpetuates. We are now seeing the effects of this cycle in the price of ransom payments reported in 2019. Coveware, a ransomware response and analytics company, reported that ransom payments in quarter four of 2019 doubled from the previous quarter, from $41,198 to $84,116 (3). This huge jump in ransom payments reflects the dramatic increase in ransomware attacks across all industries in 2019.

In some cases, the ransom and risk associated with losing the data was so high that the ransomware attacks made headlines throughout the year. Two cities in Florida fell victim to ransomware within a short period of time last summer. One of the cities, Riviera Beach, elected to pay $600,000 in bitcoin to the people who illustrated the attack in order to get back their cities data. Lake City paid just under $500,000 (4).

Not only is the pay great, but it turns out that the cost of ransomware is low. In Q4 2019, over half of the ransomware attacks recorded by Coveware used Remote Desktop Protocol credentials, which can be purchased for under $100 on the dark web (5). With few other pieces of equipment needed, a hacker can recover their costs 800 times over from the average $84,000 ransom demand.

Bill Siegel, CEO of Coveware, speaking about the low cost of ransomware attacks said, “This will continue until the profit margins go down for these cheap and simple attacks. As of right now, the margins are great for cybercrime, so it marches on” (6). So with the increase in ransomware attacks in the last year, why isn’t the trend in ransom payments following Siegel’s statement? The key is the inelasticity of data.

The demand for data directly affects the demand for ransomware. The demand for ransomware is high because the demand for data is high. The demand isn’t very elastic, meaning that demand isn’t as volatile when the price changes because it is difficult to replace someone’s data. What is the consequence? People are willing to pay a very high price to retrieve their data.

The Movement to Stop Ransomware

Some people have recognized this vicious cycle and are taking steps to fight back. Most notable is the No More Ransom Project, started by Europol and other cybersecurity companies. No More Ransom provides tips, suggestions, and decryption tools for people and organizations whose data is encrypted and held for ransom.

Others are trying to do their part by making pacts to not pay ransoms. In 2019,  the U.S. Conference of Mayors made a pact to not pay ransoms if their cities are hit with ransomware (7). Local and state governments have been especially targeted starting in 2019 because of their commonly out-of-date IT infrastructure, and the valuable data that they keep. The difference between saying you won’t pay the ransom and then actually doing so is very challenging, however. Due to data privacy and security laws, cities and companies are contractually obligated to keep citizen/customer data, and in the event of ransomware, paying the ransom may be the only option that prevents them from being fined or worse—after all, they were under-prepared for an attack.

As a Member of the Community, You Can Fight Against Ransom Payments

The first step in taking action against this cycle of ransom payments is to educate others and help people recognize the real issue. Without an understanding of what they can do to fight against the ransomware operators, those who are unaware will continue to fuel ransomware operators. As an employee or member of an organization, you are the first line of defense when it comes to protecting your organization against ransomware. When individuals are working to protect themselves, the organization as a whole will be more immune to the ransomware attacks against them. This will then pay dividends to the communities we are a part of and the cycle of ransom payments will diminish.

[/et_pb_text][et_pb_text _builder_version=”4.4.2″]

Resources:

  1. Proofpoint, Inc., Ransomware is Big Business, Retrieved from https://www.proofpoint.com/us/threat-reference/ransomware
  2. CyberEdge Group (2019), 2019 Cyberthreat Defense Report, page 14, Retrieved fromhttps://cyber-edge.com/wp-content/uploads/2019/03/CyberEdge-2019-CDR-Report.pdf
  3. Proofpoint, Inc., State of the Phish: An in-depth look at user awareness, vulnerability and resilience, Retrieved from https://www.proofpoint.com/sites/default/files/gtd-pfpt-us-tr-state-of-the-phish-2020.pdf
  4. Mazzei, Patricia (2019), Hit by Ransomware Attack, Florida City Agrees to Pay Hackers $600,000, Retreived fromhttps://www.nytimes.com/2019/06/19/us/florida-riviera-beach-hacking-ransom.html
  5. Ransomware Costs Double in Q4 as Ryuk, Sodinokibi Proliferate, Retrieved from https://www.coveware.com/blog/2020/1/22/ransomware-costs-double-in-q4-as-ryuk-sodinokibi-proliferate
  6. Viljayan, Jai, Average Ransomware Payments More Than Doubled in Q4 2019, DarkReading, Retrieved from https://www.darkreading.com/risk/average-ransomware-payments-more-than-doubled-in-q4-2019/d/d-id/1336893
  7. Kamp, Jon (2019), U.S. Mayors Unite Against Paying Ransom to Hackers, Retrieved from https://www.wsj.com/articles/u-s-mayors-unite-against-paying-ransom-to-hackers-11562774950