Friday, August 26, 2022

Never trust your attackers

from here and here

It's not the first time and it won't be the last time that ransomware operators proved themselves to be untrustworthy.  I know it's a tough position to be in, but if you get compromised you have to prepare for the possibility that the data will be leaked. Paying the people who attacked you to not make things worse has no guarantee of success. Why should they keep their word once they have what they want? It's not like they're honourable, they wouldn't have attacked you in the first place if they were.