According to the National Cyber Security Center (NCSC), many Dutch companies have been hit by ransomware attacks, which have had a serious financial impact on them.
The exact number of companies that have fallen victim to such attacks is unknown, since there are several that simply pay the ransom demanded by the hackers without being known.
According to NOS, several public services have been affected by ransomware attacks, such as the water supply service, which may have an impact on the government and other important structures in the country.
The programs and software that hold companies’ files hostage have names like LockerGoga, BitPaymer, Ryuk , and Sodinokibi. Attackers gain access to systems through previous infections of corporate systems. They buy this access from other cybercriminals . Once the attackers manage to break in, they move unnoticed inside the company’s computer systems.
Before launching a ransomware attack, they make sure to learn as much information as they can about a company's systems and how it creates and maintains backups. They then delete those backups so that the company cannot restore them without the attackers' help.
When everything is ready, the hackers lock down the systems and the company is left unprotected with the only option to pay the ransom to get files . Many times the amount the attackers ask for is huge, but it is preferable for a company to pay it than to stop operating until all its systems are rebuilt from scratch.
There is not enough security
Ransomware attackers are usually criminals looking to make a quick buck. That's why they prefer to target international companies, which can offer large ransoms andwhose backups and manuals are in English, so they can understand them.
The practice of ransomware, which was particularly popular a few years ago and while it seemed to be declining, is now starting to make a comeback. The difference is that now attackers are mainly targeting companies to make more money. Companies are also often an easy target for criminals, since most do not take the appropriate measures to protect their systems.
