SCARS Institute’s Encyclopedia of Scams™ Published Continuously for 25 Years
Understanding Ransomware – A U.S. Government Report
U.S.Department of Homeland Security, Cybersecurity and Infrastructure Security Agency
Published December 2020
Presented by SCARS
Understanding Ransomware – A CISC Guide
We want to share this document with the public to help create a greater understanding of these crimes. Our mission is to help educate & prevent cybercrime for individuals and their employers.
Overview of Ransomware
Ransomware is a form of malware designed to encrypt files on a device, rendering any files and the systems that rely on them unusable. Malicious actors then demand ransom in exchange for decryption. In recent years, ransomware incidents have become increasingly prevalent among the Nation’s state, local, tribal, and territorial (SLTT) government entities and critical infrastructure organizations.
Ransomware incidents can severely impact business processes and leave organizations without the data they need to operate and deliver mission-critical services. We have seen this recently with the Colonial Pipeline shutdown in the eastern United States under the Biden Administration.
Malicious actors have adjusted their ransomware tactics over time to include pressuring victims for payment by threatening to release stolen data if they refuse to pay and publicly naming and shaming victims as secondary forms of extortion. The monetary value of ransom demands has also increased, with some demands exceeding US $10 million.
Ransomware incidents have become more destructive and impactful in nature and scope. Malicious actors engage in lateral movement to target critical data and propagate ransomware across entire networks. These actors also increasingly use tactics, such as deleting system backups, that make restoration and recovery more difficult or infeasible for impacted organizations. The economic and reputational impacts of ransomware incidents, throughout the initial disruption and, at times, extended recovery, have also proven challenging for organizations large and small.
NOTE: SCARS is a formal crime victims’ assistance partner of DHS CISA.
[pdf-embedder url=”https://romancescamsnow.com/wp-content/uploads/2021/07/CISA_MS-ISAC_Ransomware-Guide_S508C.pdf” title=”CISA_MS-ISAC_Ransomware Guide_S508C”]
Resources:
CISA recommends that organizations review the following:
- Ransomware: What It Is and What to Do About It (CISA): General ransomware guidance for organizational leadership and more in-depth information for CISOs and technical staff: https://www.us-cert.cisa.gov/sites/default/files/publications/Ransomware_Executive_One-Pager_and_Technical_Document-FINAL.pdf
- Ransomware (CISA): Introduction to ransomware, notable links to CISA products on protecting networks, specific ransomware threats, and other resources: https://www.us-cert.cisa.gov/Ransomware
- Security Primer – Ransomware (MS-ISAC): Outlines opportunistic and strategic ransomware campaigns, common infection vectors, and best practice recommendations: https://www.cisecurity.org/white-papers/security-primer-ransomware/
- Ransomware: Facts, Threats, and Countermeasures (MSISAC): Facts about ransomware, infection vectors, ransomware capabilities, and how to mitigate the risk of ransomware infection: https://www.cisecurity.org/blog/ransomwarefacts-threats-and-countermeasures/
- Security Primer – Ryuk (MS-ISAC): Overview of Ryuk ransomware, a prevalent ransomware variant in the SLTT government sector, that includes information regarding preparedness steps organizations can take to guard against infection: https://www.cisecurity.org/white-papers/security-primer-ryuk/
-/ 30 /-
What do you think about this?
Please share your thoughts in a comment below!
Table of Contents
To Understand All Scams
Read This
The SCARS Institute Relationship Scams Formula Checklist
This is the Formula that all Relationship Scams Follow
In the U.S. & Canada
U.S. & Canada Suicide Lifeline 988
Recent Comments
On Other Articles
- Barbara on SCARS Institute – Romance Scam Simulator: “Fantastic! I have to go to bed, but I’ll do some more tomorrow. I picked an easy scenario tonight, but…” Oct 9, 18:01
- on United States – Federal Bureau of Investigations [FBI]: “It is only that way because of the shame you feel. The reality is that it was not your fault.…” Sep 30, 15:36
- on United States – Federal Bureau of Investigations [FBI]: “yhisis humiliating experience e and isembarassassing to to own up to peolealreadyassume u are not to bright because Arnold and…” Sep 30, 12:28
- on United States – Federal Bureau of Investigations [FBI]: “should be better known by public live in assisiwdlivi g apartment many manyinstancresof Romance scams here ano.us ederly l” Sep 30, 12:24
- on Is It A Scam? Phone Scam Diagnostic – v1: “I tried the this test Is it a phone scam? Mine was. I think this is a helpful tool to…” Sep 30, 10:34
- on Is It A Scam? Romance Scam Diagnostic – v2: “Carole, as you move forward with your recovery, you will learn how this all works. It was not your fault.…” Sep 29, 17:37
- on Is It A Scam? Romance Scam Diagnostic – v2: “I was blinded by such clever manipulation” Sep 29, 15:15
- on The SCARS Institute Relationship Scams Formula Checklist – 2026: “As I read this I could see myself in every step with my scam. I gained a lot more knowledge…” Aug 28, 19:51
- on The Persistence of Danielle Delaunay as a Fake Identity – 2026: “Unfortunately, you are being scammed. She is using a fake name regardless. At this point, your best option is to…” Aug 26, 20:16
- on The Persistence of Danielle Delaunay as a Fake Identity – 2026: “Dear Sirs, I have met this woman with the name Abigail Boateng in Ghana. I have an intensive mail contact…” Aug 26, 12:28
Thank you for your comment. You may receive an email to follow up. We never share your data with marketers.