{"id":8441,"date":"2017-06-09T04:00:53","date_gmt":"2017-06-08T18:00:53","guid":{"rendered":"https:\/\/www.backupassist.com\/blog\/?p=8441"},"modified":"2019-11-19T22:12:44","modified_gmt":"2019-11-19T22:12:44","slug":"harrowing-messages-from-ransomware-victims","status":"publish","type":"post","link":"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims","title":{"rendered":"Harrowing Messages from Ransomware Victims"},"content":{"rendered":"

\"dealing-with-distress-discouragement-and-spiritual-depression091911\"<\/a><\/p>\n

If you needed any evidence that ransomware makers have no shame, here it is.<\/strong> The creators of one ransomware strain set up a ‘technical support’ page for their victims\u2014and the messages they have left are truly distressing.<\/p>\n

A father with little cash, robbed of his baby’s pictures; a non-profit that raises money for curing blood cancer, pleading for a refund; a housecleaning business set up by maids who can’t afford to pay the ransom.<\/p>\n

The site not only shows victims pleading directly with the ransomware makers. It also shows an exceptionally rare event; the ransomware makers speaking back to the victims, giving a glimpse into their psychology.<\/p>\n

Warning: Confronting.<\/strong><\/em><\/p>\n

<\/p>\n

Seeing the Human Cost of Ransomware<\/h1>\n

Ransomware variants are similar to\u00a0biological viruses; they exist in ‘strains’ that rise and fall.<\/strong> They have a limited life span before they become ineffective – and then cyber-criminals have to create a new strain.<\/p>\n

This is exactly how the TeslaCrypt virus came to be. After the infamous CryptoLocker virus was taken down in\u00a0late 2014,\u00a0ransomware makers weren’t going to let a profit maker\u00a0die. So they created a variant called TeslaCrypt, or AlphaCrypt, and began spreading it the following year.<\/p>\n

The makers demanded 2.5 bitcoins\u2014approximately $550 at the time\u2014from their victims. Alternatively, they could pay $1,000 using PayPal My Cash cards.<\/p>\n

But TeslaCrypt was unusual. The makers had set up both a message center and an e-mail address so victims could contact them, acting as “customer support” to help their targets follow through with the payment.<\/p>\n

By the end of TeslaCrypt’s rampage in May 2016, it had\u00a0counted at least 1,231 victims, with 263 interacting with the cybercrime group through their messaging systems. The range of emotions of the victims are vast: from anger, bewilderment, bargaining, to desperation.<\/p>\n

The victims\u2019 comments are in blue<\/strong><\/span>; the cybercriminals\u2019 responses appear in red<\/strong><\/span>.<\/p>\n

\"15\"<\/a><\/p>\n

\"10\"<\/a><\/p>\n

\"21\"<\/a><\/p>\n

\"22\"<\/a><\/p>\n

\"7\"<\/a><\/p>\n

\"16\"<\/a><\/p>\n

In some cases, the attackers agreed to lower their demands, likely not because of empathy but because smaller payments were better than no payments at all.<\/p>\n

The minimum cost appeared to shift depending on how much the cyber-criminals seemed to think they could get out of the victim.<\/p>\n

\"13\"<\/p>\n

\"12\"<\/a><\/p>\n

In some cases, people had to rely on money coming in from other sources to pay ransom.<\/p>\n

\"14\"<\/a><\/p>\n

In some cases,\u00a0people paid the ransomware, but could not recover all their files.<\/p>\n

\"18\"<\/a><\/p>\n

\"19\"<\/a><\/p>\n

\"20\"<\/a><\/p>\n

The\u00a0Final Cost: TeslaCrypt Cost More Than WannaCry<\/h1>\n

The infamous WannaCry virus, which stuck the world this year and brought ransomware into the common conciousness<\/a>, infected more than 200,000 machines in 150 countries, and earned up to $55,000 before being neutralized.<\/p>\n

By comparison, across it’s lifespan, TeslaCrypt hit 1,231 victims and earned $76,522. For ransomware strains, both WannaCry and TeslaCrypt ask for a ransom far below the norm. For instance, the SamSam ransomware<\/a> (which has mercilessly hit hospitals and 911 services) typically asks for $18k to $28k per victim.<\/p>\n

But as the messages show, even a ‘small’ ransom can completely destroy a person’s life (And also a business; see the stats<\/a>). Which is why it’s so important to backup your data. Ironically, this was the advice the attackers gave to some paying victims before attempting to decrypt their files with their tool.<\/p>\n

\"17\"<\/a><\/p>\n

Whether you’re a home user or a business, backing up your data\u00a0with an effective backup strategy<\/a> is the only true way to protect yourself against ransomware. With it, you can recover your data without paying the attackers. And here’s the proof.<\/p>\n

\"23<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

If you needed any evidence that ransomware makers have no shame, here it is. The creators of one ransomware strain set up a ‘technical support’ page for their victims\u2014and the messages they have left are truly distressing. A father with little cash, robbed of his baby’s pictures; a non-profit that raises money for curing blood … Read more Harrowing Messages from Ransomware Victims<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":8460,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22,23],"tags":[311,589],"class_list":["post-8441","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-interest","category-news","tag-ransomware","tag-teslacrypt"],"yoast_head":"\nHarrowing Messages from Ransomware Victims<\/title>\n<meta name=\"description\" content=\"These messages, left on the message board of ransomware makers, shows the true cost of ransomware. Charities defunded, workers sacked, and lives destroyed.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Harrowing Messages from Ransomware Victims\" \/>\n<meta property=\"og:description\" content=\"These messages, left on the message board of ransomware makers, shows the true cost of ransomware. Charities defunded, workers sacked, and lives destroyed.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims\" \/>\n<meta property=\"og:site_name\" content=\"Cyber Resilience Blog\" \/>\n<meta property=\"article:published_time\" content=\"2017-06-08T18:00:53+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-11-19T22:12:44+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.backupassist.com\/app\/uploads\/sites\/3\/2017\/06\/dealing-with-distress-discouragement-and-spiritual-depression091911.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"537\" \/>\n\t<meta property=\"og:image:height\" content=\"260\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Adam Ipsen\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Adam Ipsen\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims\"},\"author\":{\"name\":\"Adam Ipsen\",\"@id\":\"https:\/\/www.backupassist.com\/blog\/#\/schema\/person\/7a3a759eceffd2e597d435c34ed3519d\"},\"headline\":\"Harrowing Messages from Ransomware Victims\",\"datePublished\":\"2017-06-08T18:00:53+00:00\",\"dateModified\":\"2019-11-19T22:12:44+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims\"},\"wordCount\":565,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.backupassist.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.backupassist.com\/app\/uploads\/sites\/3\/2017\/06\/dealing-with-distress-discouragement-and-spiritual-depression091911.jpg\",\"keywords\":[\"ransomware\",\"TeslaCrypt\"],\"articleSection\":[\"Interest\",\"News\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims\",\"url\":\"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims\",\"name\":\"Harrowing Messages from Ransomware Victims\",\"isPartOf\":{\"@id\":\"https:\/\/www.backupassist.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.backupassist.com\/app\/uploads\/sites\/3\/2017\/06\/dealing-with-distress-discouragement-and-spiritual-depression091911.jpg\",\"datePublished\":\"2017-06-08T18:00:53+00:00\",\"dateModified\":\"2019-11-19T22:12:44+00:00\",\"description\":\"These messages, left on the message board of ransomware makers, shows the true cost of ransomware. Charities defunded, workers sacked, and lives destroyed.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims#primaryimage\",\"url\":\"https:\/\/www.backupassist.com\/app\/uploads\/sites\/3\/2017\/06\/dealing-with-distress-discouragement-and-spiritual-depression091911.jpg\",\"contentUrl\":\"https:\/\/www.backupassist.com\/app\/uploads\/sites\/3\/2017\/06\/dealing-with-distress-discouragement-and-spiritual-depression091911.jpg\",\"width\":537,\"height\":260},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.backupassist.com\/blog\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Harrowing Messages from Ransomware Victims\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.backupassist.com\/blog\/#website\",\"url\":\"https:\/\/www.backupassist.com\/blog\/\",\"name\":\"Cyber Resilience Blog\",\"description\":\"Protect Your Cloud Data with BackupAssist\",\"publisher\":{\"@id\":\"https:\/\/www.backupassist.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.backupassist.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.backupassist.com\/blog\/#organization\",\"name\":\"Cyber Resilience Blog\",\"url\":\"https:\/\/www.backupassist.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.backupassist.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.backupassist.com\/app\/uploads\/sites\/3\/2019\/09\/BA-Logo-Full-Logo.svg\",\"contentUrl\":\"https:\/\/www.backupassist.com\/app\/uploads\/sites\/3\/2019\/09\/BA-Logo-Full-Logo.svg\",\"caption\":\"Cyber Resilience Blog\"},\"image\":{\"@id\":\"https:\/\/www.backupassist.com\/blog\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.backupassist.com\/blog\/#\/schema\/person\/7a3a759eceffd2e597d435c34ed3519d\",\"name\":\"Adam Ipsen\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.backupassist.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d1cb7aaf3e3a12c73b037ce2cd62192517634d57a26edc34ff6b01f40fce1a50?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d1cb7aaf3e3a12c73b037ce2cd62192517634d57a26edc34ff6b01f40fce1a50?s=96&d=mm&r=g\",\"caption\":\"Adam Ipsen\"},\"url\":\"https:\/\/www.backupassist.com\/blog\/author\/adam-ipsen\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Harrowing Messages from Ransomware Victims","description":"These messages, left on the message board of ransomware makers, shows the true cost of ransomware. Charities defunded, workers sacked, and lives destroyed.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims","og_locale":"en_US","og_type":"article","og_title":"Harrowing Messages from Ransomware Victims","og_description":"These messages, left on the message board of ransomware makers, shows the true cost of ransomware. Charities defunded, workers sacked, and lives destroyed.","og_url":"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims","og_site_name":"Cyber Resilience Blog","article_published_time":"2017-06-08T18:00:53+00:00","article_modified_time":"2019-11-19T22:12:44+00:00","og_image":[{"width":537,"height":260,"url":"https:\/\/www.backupassist.com\/app\/uploads\/sites\/3\/2017\/06\/dealing-with-distress-discouragement-and-spiritual-depression091911.jpg","type":"image\/jpeg"}],"author":"Adam Ipsen","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Adam Ipsen","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims#article","isPartOf":{"@id":"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims"},"author":{"name":"Adam Ipsen","@id":"https:\/\/www.backupassist.com\/blog\/#\/schema\/person\/7a3a759eceffd2e597d435c34ed3519d"},"headline":"Harrowing Messages from Ransomware Victims","datePublished":"2017-06-08T18:00:53+00:00","dateModified":"2019-11-19T22:12:44+00:00","mainEntityOfPage":{"@id":"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims"},"wordCount":565,"commentCount":0,"publisher":{"@id":"https:\/\/www.backupassist.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims#primaryimage"},"thumbnailUrl":"https:\/\/www.backupassist.com\/app\/uploads\/sites\/3\/2017\/06\/dealing-with-distress-discouragement-and-spiritual-depression091911.jpg","keywords":["ransomware","TeslaCrypt"],"articleSection":["Interest","News"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims","url":"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims","name":"Harrowing Messages from Ransomware Victims","isPartOf":{"@id":"https:\/\/www.backupassist.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims#primaryimage"},"image":{"@id":"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims#primaryimage"},"thumbnailUrl":"https:\/\/www.backupassist.com\/app\/uploads\/sites\/3\/2017\/06\/dealing-with-distress-discouragement-and-spiritual-depression091911.jpg","datePublished":"2017-06-08T18:00:53+00:00","dateModified":"2019-11-19T22:12:44+00:00","description":"These messages, left on the message board of ransomware makers, shows the true cost of ransomware. Charities defunded, workers sacked, and lives destroyed.","breadcrumb":{"@id":"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims#primaryimage","url":"https:\/\/www.backupassist.com\/app\/uploads\/sites\/3\/2017\/06\/dealing-with-distress-discouragement-and-spiritual-depression091911.jpg","contentUrl":"https:\/\/www.backupassist.com\/app\/uploads\/sites\/3\/2017\/06\/dealing-with-distress-discouragement-and-spiritual-depression091911.jpg","width":537,"height":260},{"@type":"BreadcrumbList","@id":"https:\/\/www.backupassist.com\/blog\/harrowing-messages-from-ransomware-victims#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.backupassist.com\/blog"},{"@type":"ListItem","position":2,"name":"Harrowing Messages from Ransomware Victims"}]},{"@type":"WebSite","@id":"https:\/\/www.backupassist.com\/blog\/#website","url":"https:\/\/www.backupassist.com\/blog\/","name":"Cyber Resilience Blog","description":"Protect Your Cloud Data with BackupAssist","publisher":{"@id":"https:\/\/www.backupassist.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.backupassist.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.backupassist.com\/blog\/#organization","name":"Cyber Resilience Blog","url":"https:\/\/www.backupassist.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.backupassist.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.backupassist.com\/app\/uploads\/sites\/3\/2019\/09\/BA-Logo-Full-Logo.svg","contentUrl":"https:\/\/www.backupassist.com\/app\/uploads\/sites\/3\/2019\/09\/BA-Logo-Full-Logo.svg","caption":"Cyber Resilience Blog"},"image":{"@id":"https:\/\/www.backupassist.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.backupassist.com\/blog\/#\/schema\/person\/7a3a759eceffd2e597d435c34ed3519d","name":"Adam Ipsen","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.backupassist.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/d1cb7aaf3e3a12c73b037ce2cd62192517634d57a26edc34ff6b01f40fce1a50?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d1cb7aaf3e3a12c73b037ce2cd62192517634d57a26edc34ff6b01f40fce1a50?s=96&d=mm&r=g","caption":"Adam Ipsen"},"url":"https:\/\/www.backupassist.com\/blog\/author\/adam-ipsen"}]}},"_links":{"self":[{"href":"https:\/\/www.backupassist.com\/blog\/wp-json\/wp\/v2\/posts\/8441","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.backupassist.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.backupassist.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.backupassist.com\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.backupassist.com\/blog\/wp-json\/wp\/v2\/comments?post=8441"}],"version-history":[{"count":2,"href":"https:\/\/www.backupassist.com\/blog\/wp-json\/wp\/v2\/posts\/8441\/revisions"}],"predecessor-version":[{"id":14557,"href":"https:\/\/www.backupassist.com\/blog\/wp-json\/wp\/v2\/posts\/8441\/revisions\/14557"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.backupassist.com\/blog\/wp-json\/wp\/v2\/media\/8460"}],"wp:attachment":[{"href":"https:\/\/www.backupassist.com\/blog\/wp-json\/wp\/v2\/media?parent=8441"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.backupassist.com\/blog\/wp-json\/wp\/v2\/categories?post=8441"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.backupassist.com\/blog\/wp-json\/wp\/v2\/tags?post=8441"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}