Ransomware is malicious software that encrypts files and requires a key to decrypt the files. To get...

Question

Ransomware is malicious software that encrypts files and requires a key to decrypt the files. To get the files decrypted, the company or organization must typically pay the hackers a large fee, often in Bitcoin or another cryptocurrency. It is important to note that cryptocurrency payments are one-way transactions that are impossible to trace. There is risk, too. If the hackers do not provide the organization with the decryption key after payment, there is no refund.

Hackers in recent years have targeted businesses such as hospitals for ransomware attacks, as well as cities and towns, large and small. Black hat hackers encrypted the city of Baltimore’s systems, as well as two smaller cities in Florida.

Read these brief articles from the UMGC library to learn about the ransomware incidents:

Chokshi, N. (2019, May 23).Attacked With Ransomware, Baltimore Isn't Giving In.New York Times, p. B6(L).

Mazzei, P. (2019, June 28).Another City in Florida Pays a Ransom to Computer Hackers.New York Times,p. A17(L).

If the organization does not pay the ransom, it would need to either use backups to restore to an earlier network or system state, or to rebuild its systems and data. In the case of the Baltimore city government, its backup systems were also encrypted, so the city was unable to process real estate transactions.

Depending on the complexity of the environment and the amount of data encrypted, this could cost the organization more than the ransom, perhaps even 10 to 20 times the amount.

What would you do if you were the cybersecurity analyst that had to advise the city of Baltimore and/or the smaller cities?

Would you pay the ransom? Consider both sides of the argument by conducting internet research to understand the different viewpoints. When you are ready, explain why you would or would not pay the ransom.

If you agree to pay the ransom, what are you going to tell the CEO if the hackers don’t end up providing the decryption key to unlock the files or come back and ask for even more money?

If you don’t agree to pay the ransom, what are you going to tell the CEO, especially if the costs to restore far exceed the ransom?

Are there ethical considerations? If your organization pays, will other organizations be vulnerable to similar attacks on their systems?

Would you have a different decision if you were working for a small organization like Mercury USA?

Amit · Accepted Answer

Title of the assignment: 
Student’s name:
Student ID:
Professor’s name:
Course title: 
Date: 9/1/2020
 Table of Contents
1.	Answer -1: Advise to Baltimore and other cities of Florida	3
2.	Answer - 2: Argument on ransom payment	3
3.	Answer 3: considerations for ransom payment and explanation to CEO	3
4.	Answer 4: considerations for not making ransom payment and explanation to CEO	4
5.	Answer 5: ethical considerations	4
6.	Answer 6: decision for small organization	5
7.	References:	6
1. Answer -1: Advise to Baltimore and other cities of Florida 
The occurrence of ransomware attacks has increased in modern time and black hat hackers use malicious software mostly based on the emails to make such attack on any network. As the encryption is performed on the complete real state database of Baltimore and two other Florida cities, so, decryption key becomes essential for this critical and important database. As the backup system is also encrypted by the hackers, so any chance of recovery is not possible. 
As the main database and backup database of real state data to these three cities is encrypted by ransomware attack, so, all the cities have to make the payment for obtaining the required decryption keys. All the cities have to maintain trust towards attacker that he/she will provide the decryption key once the ransom is provided. The Baltimore and other cities must have to protect their critical systems for ensuring that such incidents will not occur in future. 
2. Answer - 2: Argument on ransom payment  
For the provided case of Baltimore city and other cities of Florida,

Ransomware is malicious software that encrypts files and requires a key to decrypt the files. To get the files decrypted, the company or organization must typically pay the hackers a large fee, often...

Answer To: Ransomware is malicious software that encrypts files and requires a key to decrypt the files. To get...

Answer To This Question Is Available To Download

Related Questions & Answers

Submit New Assignment