A new report jointly conducted by the University of Kent and the Royal United Services Institute (RUSI) offers insights into supporting victims of ransomware incidents. It focuses on their experiences and the factors influencing them.
Authored by Dr. Jason Nurse, Dr. Sarah Turner, Dr. Nandita Pattnaik from Kent, along with Dr. Pia Hüsch, Dr. Gareth Mott, Jamie MacColl, and James Sullivan from RUSI's Cyber Research group, the report delves into the nuanced aspects shaping the ordeal faced by ransomware victims.
How to Provide Support for Ransomware Victims
Ransomware is a form of malicious software that restricts access to a computer system or its data until a payment, or ransom, is made. Typically, it encrypts files on the victim's system, rendering them inaccessible, and demands payment using cryptocurrency or other untraceable means.
Such attacks can impact individuals, businesses, or vital infrastructure, resulting in substantial disruption and financial harm. Based on interviews with victims and experts, the report outlines various factors that can affect the victim experience positively or negatively.
It emphasizes the importance of cyber-specific incident preparation and general cyber hygiene for all potential victims, irrespective of their perceived vulnerability to ransomware attacks.
Furthermore, the report underscores the psychological impact of ransomware attacks, highlighting victims' need to manage this aspect effectively during the preparation and response phases. It recommends that victims share their experiences to benefit others in similar situations, fostering personal closure and raising community awareness.
Another crucial aspect highlighted is the balance between transparency and discretion in victims' internal and external communications. This balance is seen as pivotal in managing the aftermath of ransomware incidents.
From a policy perspective, the report advocates for measures that mitigate the harm caused by ransomware attacks, mainly focusing on addressing the psychological impact through appropriate support mechanisms.
It stresses the role of public policy in shaping effective responses to ransomware incidents, urging for a comprehensive strategy that encompasses victim support as a central pillar.
Psychological Impact of Ransomware Attacks
Dr. Jason Nurse, a Reader in Cyber Security at Kent's School of Computing and member of the University's Institute of Cyber Security for Society, commented on the findings.
He acknowledged the profound psychological toll ransomware attacks inflict on victims and emphasized that effective support before and after an attack can influence the victim's recovery process.
Dr. Pia Hüsch, Cyber Research Fellow at RUSI, underscored the growing challenge of ransomware attacks and the need for robust strategies to support victims. She highlighted the report's contributions in providing new insights into the victim experience and shaping future policy directions in cybersecurity.
The report also emphasizes the role of third-party service providers in supporting victims, urging them to integrate efforts to mitigate the psychological impact of ransomware attacks into their technical and legal services. Read more about the report's recommendations here.
Read also: Black Basta Ransomware Attack: Threat Actors Abuse Windows Quick Assist to Launch Phishing Scheme
