What is double extortion ransomware?
- A Data is exfiltrated before encryption, so refusing to pay still risks publication
- B The ransom is demanded twice
- C Two variants encrypt the same files
- D Both files and backups are encrypted
Answer
Data is exfiltrated before encryption, so refusing to pay still risks publication
This changes the calculus, because good backups no longer remove the attacker's leverage entirely.





