Ever hear of double extortion? It’s a technique increasingly employed by ransomware attackers. A malware payload steals a victim’s plaintext information before launching its encryption routine. Those operating the ransomware then go on to demand two ransoms — one for a decryption utility and the other for the deletion of the victim’s stolen information from their servers. In doing so, ransomware actors hope to trap all their victims into paying up. Backups can help to negate the need for a decryption utility, the logic goes, but they mean next to nothing in the aftermath of data theft. Take a look at how to defend against double extortion and double encryption as attackers double down.