During its annual research project, that investigates user behaviour on the Internet, the IT security product company Kaspersky Lab and B2B International have discovered the average value of files stored on user devices exceed more than twice the average ransom demanded by cybercriminals for decrypting data after infecting it with crypto-ransomware. These figures explain why, Kaspersky adds, so many people are willing to pay extortionists, and once again, demonstrate the need for preventive protection measures against online threats.
Malicious programmes designed to encrypt personal data and demand ransom for its decryption, have been growing in number in recent months. The popularity of this type of threat is, to a large extent, explained by its effectiveness, Kaspersky says. According to the statistics, at least 40 per cent of victims pay fraudsters to restore their files. This is not surprising, especially considering the fact that the average ransom demanded is $300, while users say that the cost of restoring the data on their devices would be $682 on average. Moreover, for 39 per cent of respondents this figure exceeds $1,000.
Nine out of ten users report storing important personal information such as photos, video, messages and contacts on their devices and admit that if these were lost, they would not be able to restore 15 per cent of this data. According to the respondents, the most difficult thing is to restore private messages (36 per cent believe they will be lost forever if something happens to the device) and photos (27 per cent).
Despite the fact that users set a high value on the contents of their devices, not all of them take proactive protection measures and instead run the risk of having to pay hundreds of dollars to restore lost data. For example, only nine out of ten respondents install protection on Windows computers, and even less (six out of ten) on Macs. And nearly a quarter of users (23 per cent) do not backup even their most important files.
Elena Kharchenko, Head of Consumer Product Management, Kaspersky Lab, says: “It is interesting that people value their data highly and understand its irretrievability, but do so little to protect it – preferring to solve problems as they arrive. However, in cases of malicious encryption, even paying a ransom does not guarantee that the data will be returned to the owner. Unfortunately, ransomware is not the only threat jeopardising personal data. For example, data may be lost or stolen together with a device. This all means that careless user behavior may result in an emotionally upsetting experience as well as considerable financial loss.”
