CyberCX launches updated ransomware and cyber extortion best practice guide

CyberCX has launched its new Ransomware and Cyber Extortion Best Practice Guide reflecting significant changes to the global cybersecurity landscape as businesses, organisations and governments grapple with established and emerging cyberthreats.

The guide aligns CyberCX’s insights with recommendations to empower organisations to take practical steps to prevent, respond to and recover from cyberextortion attacks. The guide provides an up-to-date assessment of the cyberthreat landscape and evolving threat actor tactics, which have shifted significantly in recent times. It highlights that:

• The impact and frequency of all forms of cyber extortion are increasing. Every organisation is at risk
• Cybercriminals are using ‘harm maximisation’ tactics to increase pressure on victim organisations to pay
• There’s a growing fragmentation and diversification in the cyberextortion economy leading to specialisation, unpredictability and improved tradecraft

The release of the updated guide coincides with the gathering of governments and businesses from around the world in Washington DC for the third annual Counter Ransomware Initiative summit.

The guide’s development has been influenced by customer demand for a better understanding of the rapidly changing cyberthreat landscape. It offers insights into what technical and executive teams can collaborate on to reduce these evolving risks.

CyberCX Chief Strategy Officer, Alastair MacGibbon, said: “In an increasingly challenging and complex threat environment, it is important to create a resource that cuts through to what matters most – giving executives and professionals the tools they need to help make critical decisions.

“This guide is underpinned by the day-in, day-out experience of our exceptional incident response and intelligence teams who support technical leads, executives, and boards as they navigate and mitigate these wicked attacks.

“As criminal groups have leaned into ‘harm maximisation’ tactics, leaders have better realised that cyberincidents are no longer simply IT matters.

“This has resulted in strong demand for crisis management and strategic advisory, including crisis communications, alongside the long-establish technical response capabilities – which CyberCX proudly delivers.”