Ransomware Guide – A U.S. Government Report – DHS CISA December 2020
SCARS Institute’s Encyclopedia of Scams™ Published Continuously for 25 Years
- Published: July 26, 2021
- Modified: October 25, 2026
- Comments: 0
- Read Status:
Understanding Ransomware – A U.S. Government Report
U.S.Department of Homeland Security, Cybersecurity and Infrastructure Security Agency
Published December 2020
Presented by SCARS
Understanding Ransomware – A CISC Guide
We want to share this document with the public to help create a greater understanding of these crimes. Our mission is to help educate & prevent cybercrime for individuals and their employers.
Overview of Ransomware
Ransomware is a form of malware designed to encrypt files on a device, rendering any files and the systems that rely on them unusable. Malicious actors then demand ransom in exchange for decryption. In recent years, ransomware incidents have become increasingly prevalent among the Nation’s state, local, tribal, and territorial (SLTT) government entities and critical infrastructure organizations.
Ransomware incidents can severely impact business processes and leave organizations without the data they need to operate and deliver mission-critical services. We have seen this recently with the Colonial Pipeline shutdown in the eastern United States under the Biden Administration.
Malicious actors have adjusted their ransomware tactics over time to include pressuring victims for payment by threatening to release stolen data if they refuse to pay and publicly naming and shaming victims as secondary forms of extortion. The monetary value of ransom demands has also increased, with some demands exceeding US $10 million.
Ransomware incidents have become more destructive and impactful in nature and scope. Malicious actors engage in lateral movement to target critical data and propagate ransomware across entire networks. These actors also increasingly use tactics, such as deleting system backups, that make restoration and recovery more difficult or infeasible for impacted organizations. The economic and reputational impacts of ransomware incidents, throughout the initial disruption and, at times, extended recovery, have also proven challenging for organizations large and small.
NOTE: SCARS is a formal crime victims’ assistance partner of DHS CISA.
CISA_MS-ISAC_Ransomware Guide_S508C
Resources:
CISA recommends that organizations review the following:
- Ransomware: What It Is and What to Do About It (CISA): General ransomware guidance for organizational leadership and more in-depth information for CISOs and technical staff: https://www.us-cert.cisa.gov/sites/default/files/publications/Ransomware_Executive_One-Pager_and_Technical_Document-FINAL.pdf
- Ransomware (CISA): Introduction to ransomware, notable links to CISA products on protecting networks, specific ransomware threats, and other resources: https://www.us-cert.cisa.gov/Ransomware
- Security Primer – Ransomware (MS-ISAC): Outlines opportunistic and strategic ransomware campaigns, common infection vectors, and best practice recommendations: https://www.cisecurity.org/white-papers/security-primer-ransomware/
- Ransomware: Facts, Threats, and Countermeasures (MSISAC): Facts about ransomware, infection vectors, ransomware capabilities, and how to mitigate the risk of ransomware infection: https://www.cisecurity.org/blog/ransomwarefacts-threats-and-countermeasures/
- Security Primer – Ryuk (MS-ISAC): Overview of Ryuk ransomware, a prevalent ransomware variant in the SLTT government sector, that includes information regarding preparedness steps organizations can take to guard against infection: https://www.cisecurity.org/white-papers/security-primer-ryuk/
Always Report All Scams – Anywhere In The World To:
Go to reporting.AgainstScams.org to learn how
U.S. FTC at https://reportfraud.ftc.gov/#/?orgcode=SCARS and SCARS at www.Anyscams.com
Visit reporting.AgainstScams.org to learn more!
- External link 1: us-cert.cisa.gov
- External link 2: Stop Ransomware | CISA, us-cert.cisa.gov
- External link 3: Renew Your Ransomware Defense with CISA, cisecurity.org
- External link 4: cisecurity.org
- External link 5: Security Primer - Ryuk, cisecurity.org
- External link 6: Report Fraud, reportfraud.ftc.gov
- External link 7: AnyScam Universal Scam & Scammer Reporting – An Official SCARS Website – AnyScam Universal Scam & Scammer Reporting –..., anyscams.com
Glossary Search
Table of Contents
To Understand All Scams
Read This
The SCARS Institute Relationship Scams Formula Checklist
This is the Formula that all Relationship Scams Follow
ARTICLE CATEGORIES
In the U.S. & Canada
U.S. & Canada Suicide Lifeline 988
Get Organized Now – FREE
Organize the Records from Your Crime here: The SCARS Institute’s RED BOOK free Online Edition
A Tool to help you collect your information and make it more presentable to the Police, Banks, and for Your Records.
100% safe, private, and confidential. Only you see it.
SCARS Institute Insight
Free, Safe, and Confidential After-Scam Healing & Support is Available from the SCARS Institute
Join Us www.SCARScommunity.org
Please Leave A Comment!
Please tell us what you took from this?
Commenting is an essential part of healing
Read • Think • Write
Recent Comments
On Other Articles
[better_recent_comments number="10″ format=" on : "" October 31st, 2026" avatar_size="30″]
Important Information for New Scam Victims
- Please visit www.ScamVictimsSupport.org – a SCARS Website for New Scam Victims & Sextortion Victims
- Enroll in FREE SCARS Scam Survivor’s School now at www.SCARSeducation.org
- Please visit www.ScamPsychology.org – to more fully understand the psychological concepts involved in scams and scam victim recovery
If you are looking for local trauma counselors please visit counseling.AgainstScams.org or join SCARS for our counseling/therapy benefit: membership.AgainstScams.org
If you need to speak with someone now, you can dial 988 or find phone numbers for crisis hotlines all around the world here: www.opencounseling.com/suicide-hotlines
A Note About Labeling!
We often use the term ‘scam victim’ in our articles, but this is a convenience to help those searching for information in search engines like Google. It is just a convenience and has no deeper meaning. If you have come through such an experience, YOU are a Survivor! It was not your fault. You are not alone! Axios!
A Question of Trust
At the SCARS Institute, we invite you to do your own research on the topics we speak about and publish, Our team investigates the subject being discussed, especially when it comes to understanding the scam victims-survivors experience. You can do Google searches but in many cases, you will have to wade through scientific papers and studies. However, remember that biases and perspectives matter and influence the outcome. Regardless, we encourage you to explore these topics as thoroughly as you can for your own awareness.
Statement About Victim Blaming
SCARS Institute articles examine different aspects of the scam victim experience, as well as those who may have been secondary victims. This work focuses on understanding victimization through the science of victimology, including common psychological and behavioral responses. The purpose is to help victims and survivors understand why these crimes occurred, reduce shame and self-blame, strengthen recovery programs and victim opportunities, and lower the risk of future victimization.
At times, these discussions may sound uncomfortable, overwhelming, or may be mistaken for blame. They are not. Scam victims are never blamed. Our goal is to explain the mechanisms of deception and the human responses that scammers exploit, and the processes that occur after the scam ends, so victims can better understand what happened to them and why it felt convincing at the time, and what the path looks like going forward.
Articles that address the psychology, neurology, physiology, and other characteristics of scams and the victim experience recognize that all people share cognitive and emotional traits that can be manipulated under the right conditions. These characteristics are not flaws. They are normal human functions that criminals deliberately exploit. Victims typically have little awareness of these mechanisms while a scam is unfolding and a very limited ability to control them. Awareness often comes only after the harm has occurred.
By explaining these processes, these articles help victims make sense of their experiences, understand common post-scam reactions, and identify ways to protect themselves moving forward. This knowledge supports recovery by replacing confusion and self-blame with clarity, context, and self-compassion.
Additional educational material on these topics is available at ScamPsychology.org – ScamsNOW.com and other SCARS Institute websites.
Psychology Disclaimer:
All articles about psychology and the human brain on this website are for information & education only
The information provided in this article is intended for educational and self-help purposes only and should not be construed as a substitute for professional therapy or counseling.
While any self-help techniques outlined herein may be beneficial for scam victims seeking to recover from their experience and move towards recovery, it is important to consult with a qualified mental health professional before initiating any course of action. Each individual’s experience and needs are unique, and what works for one person may not be suitable for another.
Additionally, any approach may not be appropriate for individuals with certain pre-existing mental health conditions or trauma histories. It is advisable to seek guidance from a licensed therapist or counselor who can provide personalized support, guidance, and treatment tailored to your specific needs.
If you are experiencing significant distress or emotional difficulties related to a scam or other traumatic event, please consult your doctor or mental health provider for appropriate care and support.
Also read our SCARS Institute Statement about Professional Care for Scam Victims – click here to go to our ScamsNOW.com website.
If you are in crisis, feeling desperate, or in despair please call 988 or your local crisis hotline.
- External link 1: us-cert.cisa.gov
- External link 2: Stop Ransomware | CISA, us-cert.cisa.gov
- External link 3: Renew Your Ransomware Defense with CISA, cisecurity.org
- External link 4: cisecurity.org
- External link 5: Security Primer - Ryuk, cisecurity.org
- External link 6: Report Fraud, reportfraud.ftc.gov
- External link 7: AnyScam Universal Scam & Scammer Reporting – An Official SCARS Website – AnyScam Universal Scam & Scammer Reporting –..., anyscams.com
