RANSOMWARE

46% of ransomware attacks are on small businesses

WHAT IS RANSOMWARE?

Ransomware is a malicious software (malware) designed to block access to a computer system until a sum of money is paid.

purple bitcoin symbole

98% of payments in Bitcoin

Bitcoin is the currency of choice for cybercriminals and has been used in approximately 98% of all ransomware payments.

(source: Coveware)

$247k in purple

$247k Average Demand

Based on the analysis of more than 700 attacks in 2021, experts estimated that the ransom demand averaged was $247,000.

(source: HelpNet Security)

locked browser due to ransomware

Most Aggressive Gangs

Lockbit, Conti and Pysa were the most aggressive ransomware gangs observed, according to Group-IB's report.

(source: Group IB)


WHAT DOES RANSOMWARE LOOK LIKE?

In most ransomware attacks, cybercriminals impersonate a supplier, customer, or well-known brand, with the payload delivered by a link or attachment. Although cases involving large corporations generate headlines, a significant portion of ransomware attacks target small businesses - seen as low-hanging fruit, lacking sufficient security or backups in place, and therefore most likely to pay the ransom.. Victims that pay the ransom are sometimes seen as ‘payers’ in the eyes of attackers and can subjected to further attacks. In many cases, having paid the ransom, businesses only get some, or even none of their data back.

ransomware email masquerading as missed delivery notice from UPS

Spoofed Display Name

With the display name “UPS Team” the attacker is attempting to masquerade as the courier company, UPS. On a mobile device, the recipient will likely only see the display name.

Sense Of Urgency & Confusion

The attacker creates a sense of urgency and/or confusion if they’re not expecting a package - either way, they are invited to click on the link to track their package.

Link to Ransomware

Variations of this example are regularly seen, with new URLs not found on RBLs. When clicked on, this link downloads the ransomware which automatically encrypts data on the user’s machine.

HOW DOES MESH PROTECT AGAINST
RANSOMWARE ATTACKS?

Mesh applies over 250 unique filters to every single email it processes, protecting against the full spectrum of email attacks. Combining machine learning, predictive threat intelligence and advanced content analysis, Mesh identifies indicators of compromise, fraud, impersonation, phishing, malicious content, spam, and unsolicited marketing emails, keeping organizations and their people safe.

URL Protect

All links in the email are subjected to scanning against real-time threat feeds for known and unknown malicious sites as well as fake login pages and phishing sites. Links to unknown or suspicious objects are sandboxed.

Attachment Sandboxing

Unknown and potentially malicious attachments are detonated in a virtual environment to determine their behavior, protecting against never-before-seen, zero-hour threats like polymorphic malware.

Antimalware Engines

Mesh uses a combination of commercial and proprietary engines to perform signature and heuristic-based scanning in order to detect known and unknown, types of malware such as viruses, ransomware and trojans.

The detection accuracy is excellent & for the price point, it's a no-brainer.

Mesh has significantly reduced the amount of email-related tickets we receive. The ability to manage everything centrally from partner level makes our job so much easier - we can make changes for all clients in one go. Onboarding was quick and painless, both our engineers and end-users took to it straight away.”

Get the full case-study ⟶

Chris Pottrell
CEO @ Nebula IT


Ready to get started?

Make your customers safer and
your MSP more efficient.

MSP Success Stories

Discover how your MSP peers have made their MSPs more efficient and profitable, while delivering better email security to their customers.

View Success Stories →

Mesh is not for everyone

We’re developing the only email security platform built exclusively for MSPs, but nobody is perfect and Mesh is not for every team.

Learn Why →