Just like everyone else, malicious hackers seem to have gotten into the holiday spirit. Specifically, during the holidays, ransomware attackers sent wishes to victims and offered discounts to increase the chances of paying the ransom.
For hackers, attacks are their business. Therefore, it makes sense for them to provide offers and discounts to their victims.
This is what happened with the carriers of the Sodinokibi Ransomware (Revil). Apparently, during the holidays, the hackers changed the message they leave for victims to inform them about the ransom. In the “holiday” note, the hackers wished “Merry Christmas and Happy Holidays.”
The new note continued by saying that victims should pay the ransom to have a good chance to enter the new year, leaving all the bad behind. “I advise you to write to us as soon as possible and not waste the precious time you can spend with your family.”.
Does this approach actually increase the chances of ransom payments? That is not known. However, it certainly psychologically affects victims to some extent.
The hackers behind the Maze ransomware offered discounts
The Maze ransomware decided to give discounts to their victims, due to the holidays.
Specifically, the hackers offered a 25% discount to victims who paid the ransom between December 25 and 31.
“We are giving a 25% discount from December 25th to December 31st for those who pay during this period. Merry Christmas”!
The hackers also said that as part of the festive atmosphere, they would reduce the ransom that the city of Pensacola must pay and promised that the files in their possession would not be leaked.
“Due to the upcoming New Year’s holiday, we have decided not to publish the private information of the city of Pensacola and delete the data from servers . We are also giving them a discount of 500,000 USD. After payment, we will give them the tools ,” the hackers said.
Don't pay the ransom! If you have to, at least negotiate!
Security experts say that victims of ransomware attacks should not pay the ransom as it empowers the hackers . Users should recover their files through backups.
Sometimes, companies are unable to recover data on their own and are thus forced to pay the ransom.
In this case, victims should not simply give in to the hackers' demands but negotiate with them. In most cases, ransomware perpetrators accept less money than they initially ask for.
