From Phishing to Recovery: Breaking the Ransomware Attack Chain

Summary: Phishing emails now pass authentication checks, come from legitimate domains and trusted file-sharing services like Google Drive and SharePoint, and can blend into existing email threads, making them the entry point for ransomware rather than the end goal. The article cites that human error is involved in 60% of breaches, that 32% of ransomware attacks worldwide in 2024 ended in payment totaling $813 million, and that a Datto State of BCDR Report 2025 found nearly 60% of IT teams had downtime lasting a day or more in 2024 while only 35% who believed they could recover within a day actually could.
Bottom line: Attackers collected $813 million in ransom payments in 2024, and the gap between the more than 60% of IT teams who believed they could recover within a day and the 35% who actually did is where that payment decision gets made.

Read the original at The Hacker News ↗