Jul 2, 2019

Choice to pay ransomware might be simpler than you'd think

Illustration: Aïda Amer/Axios

The conventional wisdom about ransomware is that when local governments pay the ransom, it encourages more criminals to launch more attacks. But that's not necessarily the case, experts say.

Between the lines: The costs of recovering from a ransomware attack are often greater than the cost of the ransom.

Background: The victims of ransomware attacks are typically targets of opportunity, and cities generally aren't the primary targets. Corporations are — and they often pay up.

  • "The fact is, paying a ransom does not create a market," said Forrester Research's Josh Zelonis. "There already is a market."

By the numbers: Riviera Beach and Lake City, Florida, paid a combined $1.1 million in ransom over about a week in June.

  • Meanwhile, Atlanta spent $17 million restoring systems rather than pay a $50,000 ransom last year.
  • Baltimore is likely to spend $10 million restoring its own systems refusing to pay a $75,000 ransom this year. The disruption to its city services may cost another $8 million.

The intrigue: For some cities, the best response might be to pay the ransom, then use the millions of dollars that would have been spent on recovery to strengthen cyber defenses before the next attack.

  • "If you don't learn from the past, you will end up being ransomed again," said Deborah Golden, the new head of Deloitte's cyber consultancy.
  • Whether a city pays, doesn't pay or has yet to be attacked, prevention will often save money.

What's next: Regardless of the decision a city might make, Golden said, it's important to game plan what will happen in a ransomware attack.

  • In some cases, that might mean developing non-digital alternatives to the services that may be put on hold during an attack. "Is there a way to do something manually in the time it takes to set up the automation again?" she asked.

Go deeper

Updated 33 mins ago - Politics & Policy

Coronavirus dashboard

Illustration: Sarah Grillo/Axios

  1. Global: Total confirmed cases as of 9 a.m. ET: 5,840,369 — Total deaths: 361,066 — Total recoveries — 2,439,310Map.
  2. U.S.: Total confirmed cases as of 9 a.m. ET: 1,721,926 — Total deaths: 101,621 — Total recoveries: 399,991 — Total tested: 15,646,041Map.
  3. Public health: Hydroxychloroquine prescription fills exploded in March.
  4. Business: Many poor and minority families can't afford food or rent.
  5. 2020: Trump courts Asian American vote amid coronavirus — The RNC issued proposed safety guidelines for its planned convention in Charlotte.
  6. Vaccine: How the U.S. might distribute a coronavirus vaccine once we have one.
  7. What should I do? When you can be around others after contracting the coronavirus — Traveling, asthma, dishes, disinfectants and being contagiousMasks, lending books and self-isolatingExercise, laundry, what counts as soap — Pets, moving and personal healthAnswers about the virus from Axios expertsWhat to know about social distancingHow to minimize your risk.
  8. Other resources: CDC on how to avoid the virus, what to do if you get it, the right mask to wear.

Subscribe to Mike Allen's Axios AM to follow our coronavirus coverage each morning from your inbox.

In photos: Protests over George Floyd's death grip Minneapolis

The Third Police Precinct burns in Minneapolis on Thursday night. Photo: Stephen Maturen/Getty Images

Demonstrators demanding justice burned a Minneapolis police station and took control of the streets around it last night, heaving wood onto the flames, kicking down poles with surveillance cameras and torching surrounding stores.

What's happening: The crowd was protesting the death of George Floyd, an unarmed black man whose life was snuffed out Tuesday by a white Minneapolis police officer who kneeled on his neck for about eight minutes.

2 hours ago - Sports

European soccer's push to return

A Bundesliga match between Borussia Dortmund and Bayern Munchen in an empty stadium. Photo: Alexandre Simoes/Borussia Dortmund via Getty Images

European soccer made a splash Thursday, with two of its biggest leagues announcing official return-to-play dates in June.

Why it matters: Soccer is the world's most popular sport, so watching its return through the lens of various leagues, countries and cultures — all of which have been uniquely impacted by the coronavirus pandemic — is illuminating.