The conventional wisdom about ransomware is that when local governments pay the ransom, it encourages more criminals to launch more attacks. But that’s not necessarily the case, experts say. From a report:The costs of recovering from a ransomware attack are often greater than the cost of the ransom. The victims of ransomware attacks are typically targets of opportunity, and cities generally aren’t the primary targets. Corporations are — and they often pay up. “The fact is, paying a ransom does not create a market,” said Forrester Research’s Josh Zelonis. “There already is a market.” Riviera Beach and Lake City, Florida, paid a combined $1.1 million in ransom over about a week in June. Meanwhile, Atlanta spent $17 million restoring systems rather than pay a $50,000 ransom last year. Baltimore is likely to spend $10 million restoring its own systems refusing to pay a $75,000 ransom this year. The disruption to its city services may cost another $8 million.
For some cities, the best response might be to pay the ransom, then use the millions of dollars that would have been spent on recovery to strengthen cyber defenses before the next attack. “If you don’t learn from the past, you will end up being ransomed again,” said Deborah Golden, the new head of Deloitte’s cyber consultancy. Whether a city pays, doesn’t pay, or has yet to be attacked, prevention will often save money.
of this story at Slashdot.
Source:: Slashdot