FAQ
The specialists answer to you
FAQ : #NCSC
Feel free to contact us to ask some questions or share a comment.
Authorities (ANSSI, OFCS, Europol, FBI) unanimously recommend not paying the ransom, for several reasons:
- No guarantee — between 20 and 40% of victims who paid did not receive a functional decryption key
- Risk of double extortion — attackers may exfiltrate data before encryption and threaten to publish it even after payment
- Funding of crime — payment encourages further attacks and may expose the company to legal penalties in certain jurisdictions
- Existing alternatives — in 30 to 50% of incidents, full or partial recovery is possible without payment
Before making any decision, consult a data recovery specialist and report the attack to the National Cyber Security Centre (NCSC) in Switzerland or to ANSSI in France.
