Table Of Contents

As ransomware groups evolve, threat actors are becoming increasingly hostile and innovative, adopting new tactics that add significant external pressures. These pressures include doxxing executives, threatening to release embarrassing or sensitive information, or alerting stakeholders about data breaches—all to increase the likelihood of payment. This “extortion economy” represents a growing risk that parallels many ransomware threats.

To further complicate matters, the distinction between overt malicious actors and self-proclaimed ethical hackers is increasingly blurred. As a result, organizations must actively engage in these environments to preemptively counter threats and adapt strategies from ransomware response playbooks to address these lesser-known extortion techniques. In this article, we delve into these tactics, outlined in the Flashpoint 2024 Global Threat Intelligence Report.

Cyber extortion tactics explored

1. Data Encryption: The classic tactic of using malware to lock or encode a victim’s data remains prevalent. Attackers demand payment for the decryption key, holding the data hostage.
2. Data Extortion: Attackers now also threaten to release or sell the stolen data unless they receive payment, applying even more pressure on victims.
3. Unethical Vulnerability Disclosures: Some cyber actors exploit discovered vulnerabilities for financial gain, blurring the lines between ethical hacking and cyber extortion.
4. Underground Economies’ Influence: The dark web increases the value of stolen data, treating it as a commodity and facilitating further attacks.
5. Access Brokers: The sale of unauthorized access to systems often serves as a precursor to multifaceted cyber attacks, creating a persistent threat landscape.
6. Distributed Denial-of-Service (DDoS) Attacks: DDoS attacks incapacitate a victim’s online services with overwhelming traffic, paired with a ransom demand to cease the attack.
7. Physical Threats Related to Cyber Activities: In extreme cases, cyber threats are accompanied by physical threats to victims or their families, compelling compliance with ransom demands.

Strategies to combat emerging cyber extortion tactics

In response to these diverse and complex extortion tactics, organizations need to adopt a multifaceted approach to cybersecurity. Implementing robust defense mechanisms and proactive strategies can significantly mitigate the risks posed by these modern threats. Here’s how:

1. Implement Robust Encryption and Backup Procedures: Ensure that all sensitive data is encrypted and regularly backed up to secure, off-site locations.
2. Advanced Threat Detection and Response: Utilize machine learning and AI to detect unusual data patterns and establish a swift incident response plan.
3. Vulnerability Management Program: Include regular security assessments, penetration testing, and prompt patching of software vulnerabilities.
4. Monitor and Analyze Dark Web Activities: Continuously monitor Dark Web forums and marketplaces to stay informed about the latest trends.
5. Zero Trust Architecture: Verify every user and device trying to access your network, minimizing the risk posed by access brokers.
6. Protect Against DDoS Attacks: Implement solutions that detect and mitigate large-scale DDoS attacks.
7. Employee Education and Physical Security Measures: Train employees on cybersecurity risks and enhance physical security measures.

Take action with Flashpoint

The landscape of cyber extortion is dynamic and increasingly sophisticated, necessitating an equally robust response from organizations. By adopting these proactive strategies, businesses can bolster their defenses against a wide array of threats and mitigate the impact of potential attacks. To see how Flashpoint can further enhance your organization’s security posture, sign up for a demo today.