Double Extortion
A ransomware attack strategy in which the threat actor exfiltrates sensitive data before encrypting the victim's files. The attacker then threatens to publicly release the stolen data as additional leverage, making recovery from backups alone insufficient to eliminate the ransom pressure.
Timeline (last 90 days)
The double extortion strategy of stealing data first and then threatening to publish it means that even victims with complete backups cannot avoid the risk
Double extortion is an attack strategy first adopted by the Maze ransomware gang in late 2019.
Double extortion involves exfiltrating data to attacker-controlled servers before encrypting the victim's files.
All Facts (3)
Double extortion involves exfiltrating data to attacker-controlled servers before encrypting the victim's files.
60%UnverifiedThe double extortion strategy of stealing data first and then threatening to publish it means that even victims with complete backups cannot avoid the risk
50%UnverifiedDouble extortion is an attack strategy first adopted by the Maze ransomware gang in late 2019.
50%