Ethical Hacking News
Ransomware attacks are becoming increasingly personal, with cybercriminals using psychological and physical threats to extort payment from victims. According to a recent survey, 37% of ransomware attacks involve such threats, and attackers are increasingly targeting families of their victims. The survey highlights the need for organizations to prioritize cybersecurity and take proactive measures to prevent and respond to ransomware attacks.
Ransomware attacks are becoming increasingly sophisticated and personalized, with 37% of attacks involving psychological or physical threats.Attackers are targeting not just executives and staff, but also families of their victims, using tactics such as threatening texts, letters, or packages.Physical intrusion, abduction, bodily harm, and stalking are common threats used by cybercriminals.Some attackers use cybercrime as a gateway to real-life violence.69% of surveyed ransomware victims were targeted multiple times within the past 12 months.53% of respondents reported that ransomware attackers carried through on threats in the past year.Organizations must prioritize cybersecurity and take proactive measures to prevent and respond to ransomware attacks.
Ransomware attacks have long been a threat to individuals and organizations, but recent data suggests that the tactics used by cybercriminals are becoming increasingly sophisticated and personalized. According to a recent survey conducted by Semperis, a senior incident response consultant at Semperis, 37% of ransomware attacks involve psychological or physical threats, with the goal of extorting payment from victims.
The survey, which involved 1,200 post-ransomware organizations, found that attackers are no longer just targeting executives and staff, but also families of their victims. The threats used by cybercriminals range from threatening texts, letters, or packages to physical intrusion, abduction, bodily harm, and stalking. In some cases, attackers even use cybercrime as a gateway to real-life violence.
Tim Beasley, a senior incident response consultant at Semperis, investigated a cyberattack involving Russia’s Midnight Blizzard and received a package containing nesting dolls and other regional gifts on his doorstep. Beasley assumed it was from the group, which has been linked to the Kremlin’s Foreign Intelligence Service (SVR), although the sender didn’t leave a note. "Just little souvenirs and gift basket stuff from that area of the world," he told The Register. "We-know-where-you-are kind of stuff. It’s a real eye-opener when you get that type of thing."
Beasley emphasized the importance of standing one's ground against such threats and not paying ransom. "Don't pay anything," he said. "Never pay them." He also highlighted the need for organizations to have a plan in place for such situations, including involving law enforcement and seeking support from personal security teams.
The survey found that 69% of surveyed ransomware victims were targeted multiple times within the past 12 months, and 31% made multiple payments to attackers. This highlights the need for organizations to take proactive measures to prevent and respond to ransomware attacks, including implementing robust security measures and having a clear incident response plan in place.
In addition to the psychological and physical threats, the survey also found that 53% of respondents reported that ransomware attackers carried through on threats in the past year. This includes threats against family or friends, physical intrusion, abduction, bodily harm, and stalking. The use of such threats is becoming increasingly common, and organizations must be prepared to respond to these types of attacks.
The survey also highlights the growing trend of cybercrime as a gateway to real-life violence. Europol and its partners' investigators flagged 4,340 "horrific" URLs for removal as part of an ongoing crackdown on The Com, a loosely knit network of online groups whose young members participate in a range of illicit activities, including hacking, swatting, digital extortion, real-life shootings, and other physical violence.
The findings of the survey emphasize the need for organizations to prioritize cybersecurity and take proactive measures to prevent and respond to ransomware attacks. This includes implementing robust security measures, having a clear incident response plan in place, and involving law enforcement and personal security teams when necessary.
Related Information:
https://www.ethicalhackingnews.com/articles/Ransomware-Gets-Personal-The-Increasingly-Harsh-Consequences-of-Psychological-and-Physical-Threats-ehn.shtml
https://www.theregister.com/cyber-crime/2026/10/14/ransomware-gets-personal-we-know-where-you-are-kind-of-stuff/5302939
Published: Wed Oct 14 01:02:44 2026 by llama3.2 3B Q4_K_M
