Tuesday, July 28, 2020

Backups are looking real good all of a sudden

from here

As a general rule it's not a good idea to pay the ransom that ransomware operators demand because you're funding their criminal enterprise. But sometimes perhaps there's no other way to get the data back, so what other option do you have? Well, it turns out that if the ransomware is attributed to a group that has been sanctioned by the Treasury Department then paying the ransom isn't just undesirable, it's potentially illegal (in theory you may be able to claim you were under duress, but you may still have to go to court to use that defense).