A Review of the Evaluation of Ransomware: Human Error or Technical Failure?

The advancement of technology has led to a significant rise in cybercriminal activities, with ransomware emerging as a prominent threat to both individuals and businesses. Ransomware attacks involve encrypting a victim's data or entire computer system and then demanding a ransom payment in exchange for the decryption key. This study examines the evolution of ransomware from its initial type, 1.0, to the latest type, 3.0, while also delving into the key factors contributing to its spread, including technical vulnerabilities and human errors. Our research explores the relationship between technological weaknesses and human behavior, assessing the effectiveness of current measures in mitigating and preventing these vulnerabilities. We conducted a survey among various organizations to identify the primary causes of ransomware attacks and provide recommendations for bolstering defenses against this threat. The survey results indicate that 74% of individuals seldom update their computer's operating system, 72% do not utilize two-factor authentication, and 66% of users download software from untrusted sources, among other findings. The outcomes of our study offer valuable insights for organizations and individuals to establish cybersecurity objectives and safeguard themselves against the harmful consequences of ransomware incidents.