Study. uk . com
  1. Home
  2. All questions
  3. Question 458

CISSP study material · question 458 of 500

A ransomware group encrypts a victim's systems, having first copied the data out, and threatens to publish it unless paid. What is this pattern called, and what variant does CISA also describe?

  1. Double encryption; some actors encrypt twice with different keys.
  2. Second-stage extortion; some actors extort the victim's customers directly.
  3. Data denial; some actors delete the data rather than encrypt it.
  4. Double extortion; some actors now steal data and extort on that alone without deploying ransomware.
Show the answer

Answer: D. Double extortion; some actors now steal data and extort on that alone without deploying ransomware.

Double extortion applies both tactics, encryption and stolen data with a publication threat, and some actors now extort on the stolen data alone.

Source: CISA #StopRansomware Guide (CISA) — CISA #StopRansomware Guide > Introduction

Challenge yourself on this topic → Study as cards