A new ransomware attack tactic has begun to be used by hackers to blackmail their victims: They do attacks DDoS the victim's website until they pay the liters to decrypt their files.
A DDoS attack is when a malicious user sends a large packet of data to a website or sends a large volume of requests. Its purpose is to make a service unavailable due to load work.
It all started with a ransomware site from SunCrypt. After the negotiations were delayed, the website was attacked by DDoS.
When the victim returned to negotiations with the blackmailers, he received a message stating that SunCrypt was responsible for DDoS and would continue the attack if negotiations did not continue.
"Your website is currently down modebecause of us. Send us a message as soon as possible or further action will be taken,” warned the operator of the SunCrypt ransomware.
When the victim asked why their site was down, ransomware operators said they were doing so in order to force them to negotiate.
So after the victim again started the negotiations for the ransom, the ransomware creator agreed to stop DDoS attacks.
Η MalwareHunterTeam said that this tactic eventually led the victim to pay the ransom.
This tactic was particularly effective. Combining data theft, lack access to encrypted files and now a DDoS attack, a victim with a small business turnover could shut down their business completely.
This is another example of ransomware groups upgrading their tactics to increase pressure on their victims to feel that there is no choice but to pay a ransom.
