Ransomware Demands Surge 47%
Initial ransomware demands surged 47% in the last year, but a new report from cybersecurity firm Coalition finds most businesses are refusing to pay. The most common cyber insurance claims continue to be business email compromise and funds transfer fraud.
The 47% surge in initial demands reflects a complex reality: while attackers are asking for more, the average ransom *payment* has actually decreased. This paradox is driven by a tactical shift where ransomware operators now focus on data theft and extortion threats over simple encryption, hoping a bigger initial demand will anchor negotiations higher. This trend is part of a broader evolution in cybercrime, where Ransomware-as-a-Service (RaaS) platforms on the dark web have lowered the barrier to entry. These platforms enable less sophisticated actors to launch attacks, contributing to a 30% rise in the number of new ransomware groups in the last year. Business Email Compromise (BEC) and funds transfer fraud remain more frequent claims than ransomware. In a typical BEC scam, attackers use social engineering to impersonate a trusted executive or vendor to trick employees into wiring money or divulging sensitive data, costing businesses over $50 billion since 2013. For software engineers, this landscape means security is no longer a niche specialty but a core competency. Many successful attacks exploit software vulnerabilities, making a "shift-left" approach—integrating security into the earliest stages of the software development lifecycle (SDLC)—a critical practice. This reality is directly impacting the hiring pipeline for tech roles. Companies are increasingly seeking developers who can write secure code, perform threat modeling, and manage the security of open-source dependencies from day one. Aspiring engineers can expect this focus to appear in technical interviews. System design questions now often include security components, such as designing a secret management service, securing microservices, or architecting a system to handle fraudulent transactions, reflecting the real-world challenges engineers are expected to solve.
