Ransom Gangs Emailing Victim Customers for Leverage* – Some of the top ransomware gangs are deploying a new pressure tactic to push more victim organizations into paying an extortion demand: Emailing the victim’s customers and partners directly, warning that their data will be leaked to the dark web unless they can convince the victim firm to pay up. The email states:
“Good day! If you received this letter, you are a customer, buyer, partner or employee of [victim],” the missive reads. “The company has been hacked, data has been stolen and will soon be released as the company refuses to protect its peoples’ data.”
“We inform you that information about you will be published on the darknet [link to dark web victim shaming page] if the company does not contact us,” the message concludes. “Call or write to this store and ask to protect your privacy!!!!”
Please be aware of these fraudulent tactics and remember to looks for clues in your emails indicating they are scams: Have you ever used the company? Are there spelling errors? Hover over any links before clicking to see the actual link, and don’t click unless you know the web site.
*Ransom Gangs Emailing Victim Customers for Leverage, KrebsonSecurity