--- title: Hackers strike again with a new Ransomware plot. description: Ransomware gangs have now upped the ante of their attacks to cause massive losses for victim organisations. With threats to those who refuse to pay. image: https://www.aabyss.uk/hubfs/nikita-kachanovsky-OVbeSXRk_9E-unsplash.jpg --- [![Aabyss Logo](https://www.aabyss.uk/hs-fs/hubfs/Untitled%20design-1.png?width=218&height=61&name=Untitled%20design-1.png "Aabyss Logo")](https://www.aabyss.uk/) ### 0151 733 3223 - [**](https://www.facebook.com/aabysstech/) - [**](https://twitter.com/aabysstech) - [**](https://www.linkedin.com/company/aabysstech/) - [**](mailto:hello@aabyss.uk) ![Aabyss Blog Heading Background](https://www.aabyss.uk/hubfs/48.jpg "Aabyss Blog Heading Background") ## News & Opinion #### Gain the edge on the world of business technology and cyber security # Hackers strike again with a new Ransomware plot. Posted by [Andrew Allen](https://www.aabyss.uk/news/author/andrew-allen) | 30-Dec-2019 10:06:28 - [Tweet](https://twitter.com/share) ![nikita-kachanovsky-OVbeSXRk_9E-unsplash](https://www.aabyss.uk/hubfs/nikita-kachanovsky-OVbeSXRk_9E-unsplash.jpg) - Ransomware gangs have signalled to publish the data stolen from victims who refuse to pay the ransom. - Cybercriminals behind the Maze ransomware have erected a website on the public internet that identifies recent victim companies that opted not to pay a ransom. Ransomware gangs have now upped the ante of their attacks to cause massive losses for victim organisations. They have signalled to publish the data stolen from victims who refuse to pay the ransom. **Making the matter worse** While the destruction is slowly in progress, cybercriminals behind the Maze ransomware have erected a website on the public internet that identifies recent victim companies that opted not to pay a ransom and chose to rebuild their operations. The website which was created in less than 48 hours, currently includes the eight affected companies and their corresponding websites. All these victim companies had declined to pay a ransom demand, thus making their customers’ data viable to identity theft and more. This new change in the tactic of Maze ransomware operators came to notice only in November when it infected Allied Universal systems and later released 700MB worth of sensitive data on a hacking forum after the firm refused to pay the ransom demand. **More insight into the stolen data** To make it worse, the site has also exposed several volumes of files and documents belonging to each victim companies. The information disclosed for each Maze victim includes the initial date of infection, several stolen Microsoft Office, text and PDF files, the total volume of files allegedly ex-filtrated from victims as well as the IP addresses and machine names of the servers infected by Maze. **Other cybercriminals are also in a row** This change in the operation of Maze ransomware operators comes just days after the cybercriminals responsible for managing the Sodinokibi/REvil ransomware posted on a popular dark web forum that they also plan to publicly publish the stolen data of victims who fail to pay ransoms. As part of the operation, UNKN, the public-facing representative of REvil ransomware, claimed to have stolen files from the CyrusOne data centre before encrypting their network. **The bigger picture of data loss** With sensitive data at stake during ransomware attacks, organisations can face steep fines and other penalties for failing to safeguard their customers’ data. However, these victims may be able to avoid the penalty if they can show forensic evidence demonstrating that customers’ data was never accessed but with the sites like the one that Maze ransomware has now erected, situations can turn more complicate. **To pay or not to pay is the question** The key aspect is that organisations should treat a cybersecurity incident as a serious issue. For this, they should be well-planned and prepared. The security personnel and employees should quickly and effectively know how to respond and recover when faced with a ransomware attack. It is always better to be prevent incidents than to later be looking for a solution. Microsoft suggests that there is no guarantee that encrypted data will be restored even after the victim pays the ransom. “We never encourage a ransomware victim to pay any form of ransom demand. Paying a ransom is often expensive, dangerous, and only refuels the attackers’ capacity to continue their operations; bottom line, this equates to a proverbial pat on the back for the attackers. The most important thing to note is that paying cybercriminals to get a ransomware decryption key provides no guarantee that your encrypted data will be restored. The most important thing to note is that paying cybercriminals to get a ransomware decryption key provides no guarantee that your encrypted data will be restored,” Microsoft explains in its [blog post](https://www.microsoft.com/security/blog/2019/12/16/ransomware-response-to-pay-or-not-to-pay/). **We're Aabyss and we can better secure your all-important data** If you’re concerned about your cyber security and protecting your private data, we can help. We’re Aabyss and we have years of experience in supporting small-medium businesses with cyber security challenges. We’ll get to know your business and create the most appropriate solution to meet your technical requirements. If you have any concerns, please contact the team today. **Source:** [https://cyware.com/news/to-pay-or-not-to-pay-organizations-are-in-a-bind-as-ransomware-gangs-adopt-a-new-tactic-104879af](https://cyware.com/news/to-pay-or-not-to-pay-organizations-are-in-a-bind-as-ransomware-gangs-adopt-a-new-tactic-104879af)   [![CTA-Banner-Aabyss-3](https://www.aabyss.uk/hs-fs/hubfs/CTA-Banner-Aabyss-3.jpg?width=777&name=CTA-Banner-Aabyss-3.jpg)](https://app.hubspot.com/meetings/andrewallen/90-minute-meeting?hsCtaTracking=212def00-8ca8-4b09-b762-23742719b884%7C85910036-2ee6-4546-a90c-11a03e738ac8)   Topics: [Cybersecurity](https://www.aabyss.uk/news/topic/cybersecurity), [Technology](https://www.aabyss.uk/news/topic/technology) #### Written by [Andrew Allen](https://www.aabyss.uk/news/author/andrew-allen) My personal and business life. I am lucky to have supportive friends and family, and although I am competitive, I try to put others first. I am an active Rotarian, helping support local and international charities. As a former member of Mountain Rescue, I enjoy spending time with my family in the mountains. We regularly travel to experience new cultures and cuisine; I’m a bit of a foodie! In my day job as Chief Executive, I am responsible for ensuring we stay true to our purpose and values. In a strategic capacity, I am also responsible for developing relationships with key partners and major accounts. I love working with ambitious, growing companies who want to challenge themselves and the status quo. Technology, when properly leveraged, can help an organisation differentiate and beat their competition. It's a real joy to make a difference. [LinkedIn](https://www.linkedin.com/in/askandrewallen/) [Twitter](https://twitter.com/askandrewallen) ## Leave a Comment ### Recent Posts ### Topics - [Aabyss News (45)](https://www.aabyss.uk/news/topic/aabyss-news) - [AI (3)](https://www.aabyss.uk/news/topic/ai) - [Artificial Intelligence (3)](https://www.aabyss.uk/news/topic/artificial-intelligence) - [Attack (12)](https://www.aabyss.uk/news/topic/attack) - [Backup (4)](https://www.aabyss.uk/news/topic/backup) - [BYOD (1)](https://www.aabyss.uk/news/topic/byod) - [Cloud (12)](https://www.aabyss.uk/news/topic/cloud) - [Connectivity (7)](https://www.aabyss.uk/news/topic/connectivity) - [Customer (2)](https://www.aabyss.uk/news/topic/customer) - [Cyber (18)](https://www.aabyss.uk/news/topic/cyber) - [Cyber Insurance (2)](https://www.aabyss.uk/news/topic/cyber-insurance) - [Cybersecurity (53)](https://www.aabyss.uk/news/topic/cybersecurity) - [Data Management (5)](https://www.aabyss.uk/news/topic/data-management) - [Disaster Recovery (6)](https://www.aabyss.uk/news/topic/disaster-recovery) - [Emerging (3)](https://www.aabyss.uk/news/topic/emerging) - [Hospitality (2)](https://www.aabyss.uk/news/topic/hospitality) - [Insider (2)](https://www.aabyss.uk/news/topic/insider) - [IT News (36)](https://www.aabyss.uk/news/topic/it-news) - [IT Support (24)](https://www.aabyss.uk/news/topic/it-support) - [Managed Service (35)](https://www.aabyss.uk/news/topic/managed-service) - [Management (13)](https://www.aabyss.uk/news/topic/management) - [Outsourced IT (2)](https://www.aabyss.uk/news/topic/outsourced-it) - [Password (7)](https://www.aabyss.uk/news/topic/password) - [Productivity (36)](https://www.aabyss.uk/news/topic/productivity) - [Ransomware (4)](https://www.aabyss.uk/news/topic/ransomware) - [Security (51)](https://www.aabyss.uk/news/topic/security) - [Social Media Threats (2)](https://www.aabyss.uk/news/topic/social-media-threats) - [Strategy (24)](https://www.aabyss.uk/news/topic/strategy) - [Technologies (6)](https://www.aabyss.uk/news/topic/technologies) - [Technology (29)](https://www.aabyss.uk/news/topic/technology) - [Technology Budgeting (1)](https://www.aabyss.uk/news/topic/technology-budgeting) - [Tips & Tricks (16)](https://www.aabyss.uk/news/topic/tips-tricks) - [WiFi (1)](https://www.aabyss.uk/news/topic/wifi) - [Work-from-home (1)](https://www.aabyss.uk/news/topic/work-from-home) [see all](https://www.aabyss.uk/news/cyber-3#) #### ABOUT AABYSS We are commercially focused technology strategists who help clients outperform their competitors through proven leadership, management and support. We make informed IT decisions to simplify your technology needs and support your growing business. ### Subscribe for Cyber Security Updates #### LIVERPOOL OFFICE 19 Meridian Business Village Hansby Drive Liverpool L24 9LG [///cocktail.audible.bulbs](https://what3words.com/cocktail.audible.bulbs) T: 0151 733 3223 E: [hello@aabyss.uk](mailto:hello@aabyss.uk?subject=Website%20Enquiry) #### SHEFFIELD OFFICE 3 Newton Business Centre Thorncliffe Park Estate  Newton Chambers Road Sheffield S35 2PH [///countries.winded.winter](https://what3words.com/countries.winded.winter) T: 0114 361 0062 E: [hello@aabyss.uk](mailto:hello@aabyss.uk?subject=Website%20Enquiry)   #### COMPANY POLICY [Service Level Standards](https://www.aabyss.uk/service-level) [Cookie Policy](https://www.aabyss.uk/cookie-policy) [Privacy Policy](https://www.aabyss.uk/privacy-policy) [Complaints](https://www.aabyss.uk/complaints-policy) [Modern Slavery](https://www.aabyss.uk/hubfs/Downloads/Modern%20Slavery%20Statement.pdf) [Report Abuse](https://www.aabyss.uk/abuse) Company Registered in England & Wales, Company No. 04726959 - [**](https://www.facebook.com/aabysstech/) - [**](https://twitter.com/aabysstech) - [**](https://www.linkedin.com/company/aabysstech/) ©2025 Aabyss Ltd. ** ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Andrew Allen", "url" : "https://www.aabyss.uk/news/author/andrew-allen" }, "dateModified" : "2019-12-30T10:06:28.763Z", "datePublished" : "2019-12-30T10:06:28.000Z", "headline" : "Hackers strike again with a new Ransomware plot.", "image" : [ "https://www.aabyss.uk/hubfs/nikita-kachanovsky-OVbeSXRk_9E-unsplash.jpg" ], "mainEntityOfPage" : { "@id" : "https://www.aabyss.uk/news/cyber-3", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.aabyss.uk/hubfs/Untitled%20design-1.png" }, "name" : "Aabyss Ltd" } } ```