--- title: BitPaymer Ransomware Making Noise in World of Cybersecurity description: Bitpaymer ransomware has seen a surge in its activity since April. Billtrust, Piliz, and Apple Software Update service have all been recently been affected by the ransomware. image: https://blog.canauri.com/hubfs/BitPaymer%20Ransomware.jpg --- - [319-383-0165](tel:+1.319-383-0165) - [Free Tools](https://www.getcryptostopper.com/free-tools) - [About](https://www.getcryptostopper.com/about) - [Partners](https://www.getcryptostopper.com/partners) [![CryptoStopper™](https://blog.canauri.com/hubfs/cryptostopper-logo.png)](https://www.getcryptostopper.com/) - [CryptoStopper™](https://www.getcryptostopper.com/cryptostopper/) - [For MSPs](https://www.getcryptostopper.com/cryptostopper-for-msps/) - [Blog](https://blog.getcryptostopper.com/) [Pricing](https://www.getcryptostopper.com/pricing) # BitPaymer Ransomware Making Noise in World of Cybersecurity October 31, 2019 [Jordan Kadlec](https://blog.canauri.com/author/jordan-kadlec) ![BitPaymer Ransomware](https://blog.canauri.com/hs-fs/hubfs/BitPaymer%20Ransomware.jpg?width=841&name=BitPaymer%20Ransomware.jpg) Business-to-business payments provider, Billtrust, and German manufacturer, Pilz, were both hit by the ransomware strain dubbed BitPaymer last week. The ransomware has also been spotted exploiting a zero-day vulnerability in the Apple Software Update service.    BitPaymer ransomware first appeared in the summer of 2017 and has since been tied to several high-profile incidents, including the PGA, Arizona Beverages, Scottish hospitals, and two Alaskan municipalities. The creators of BitPaymer engage in what’s known as “big game hunting” where they only go after high-value targets. Instead of using the “spray and pray” technique where hackers try to infect anyone and everyone, BitPaymer goes after the big targets in hopes of extracting a large ransom payment. **Billtrust Ransomware Attack** Billtrust, a cloud-based service that allows customers to view invoices, pay, or request bills via email or fax, was hit by a BitPaymer ransomware attack on October 17th. In an email sent to customers, Billtrust indicated it was working with law enforcement officials as well as an outside consulting firm to determine the extent of the breach. More than ten days after the ransomware attack, BitPaymer has restored most of its systems; however, some remain offline. Billtrust President Steven Pinado said that the company is implementing additional security measures to protect against a future attack. It’s unclear whether BitPaymer paid a ransom in exchange for a decryption key, but the company does have cybersecurity insurance in place. **Pilz Infected with BitPaymer Ransomware** Pilz, one of the world’s largest producers of automation tools, was infected with BitPaymer ransomware on October 13th. The firm offers a range of products vital to automate industrial environments, such as configurable safety controllers, programmable safety systems, safety sensors, operator and visualization systems, system and application software, drive technology, and integrated standard and safety automation systems. The company has locations across 76 countries, all of which were impacted by the ransomware attack and disconnected from the main network. The attack affected the delivery of shipments and company communications. It took Pilz six days to restore complete access to its email systems and eight days to access the product orders and delivery systems. **BitPaymer Exploits Zero-Day Vulnerability in Apple Software Update Service** Several companies were targeted by BitPaymer ransomware in attacks that used an Apple zero-day vulnerability impacting the Apple Software Update service. Apple Software Update is an updater service that is automatically installed on computers when users install iTunes or iCloud for Windows or when using Boot Camp Assistant to install Windows on a Mac. The service is designed to keep all Apple applications up-to-date on a Windows device, as well as to deliver software and security updates to Windows installations running on Mac computers. BitPaymer’s operators were able to find an unquoted path vulnerability within the Apple Software Update which allowed them to launch their ransomware on any devices that used iTunes or iCloud. They did this by taking advantage of the fact that Apple’s developers did not surround the service binary’s execution path with quotes, making it possible for them to launch the BitPaymer ransomware dropped in the form of a binary named ‘Program’ without an extension.  The Apple Software Update binary is signed by Apple thus, using it to launch the ransomware enabled them to evade detection. **BitPaymer Activity Surges** While these three examples are only the largest of the attacks, the creators of BitPaymer have been extremely busy since April. The chart below shows BitPaymer’s activity throughout the last year. The chart is a submission to ID-Ransomware, an online service sponsored by the MalwareHunterTeam and Emsisoft where victims can upload samples and detect the type of ransomware they been infected with. Most ransomware charts are smooth, as they normally have daily submissions from victims who get infected. However, for BitPaymer, the spikes show occasional infections as the ransomware is deployed on a handful of carefully selected targets, as opposed to spamming it out. CryptoStopper by WatchPoint  CryptoStopper, developed by WatchPoint, can protect against BitPaymer ransomware. CryptoStopper uses deception technology to detect ransomware. During the installation process, decoy files are strategically placed. We call these Watcher Files. When ransomware begins the encryption process, CryptoStopper detects it in real-time and takes automated action to stop the attack in milliseconds and then alerts you to the event.  Antivirus and firewalls no longer provide the protection you need to save your network from a ransomware attack.  Using deception technology and CryptoStopper is the only way to stop an actively running attack that has evaded your traditional defenses. [Click here](http://watchpointdata.com/) to learn more about CryptoStopper and how WatchPoint can help with your cybersecurity needs!  Photo courtesy of removemalwarevirus.com  ### Share this: - [Tweet](https://twitter.com/share) [Previous Post Ransomware Attacks Continue to Wreak Havoc on the Healthcare Sector](https://blog.canauri.com/ransomware-attacks-continue-to-wreak-havoc-on-the-healthcare-sector) [Next Post Raccoon Stealer Malware Service Gaining Popularity](https://blog.canauri.com/raccoon-stealer-malware-service-gaining-popularity) [![Entrepreneur Link](https://blog.canauri.com/hs-fs/hubfs/Watch_Point_Data_December2017_Theme/images/Feature-on-Entrepreneur.com_.png?width=300&height=300&name=Feature-on-Entrepreneur.com_.png)](https://www.entrepreneur.com/article/286698) ### Share [![Share on Facebook](https://static.hubspot.com/final/img/common/icons/social/facebook-24x24.png)](http://www.facebook.com/share.php?u=https%3A%2F%2Fblog.canauri.com%2Fbitpaymer-ransomware-making-noise-in-world-of-cybersecurity%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on LinkedIn](https://static.hubspot.com/final/img/common/icons/social/linkedin-24x24.png)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fblog.canauri.com%2Fbitpaymer-ransomware-making-noise-in-world-of-cybersecurity%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on Twitter](https://static.hubspot.com/final/img/common/icons/social/twitter-24x24.png)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fblog.canauri.com%2Fbitpaymer-ransomware-making-noise-in-world-of-cybersecurity%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fblog.canauri.com%2Fbitpaymer-ransomware-making-noise-in-world-of-cybersecurity%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=BitPaymer%20Ransomware%20Making%20Noise%20in%20World%20of%20Cybersecurity) [![Share on Pinterest](https://static.hubspot.com/final/img/common/icons/social/pinterest-24x24.png)](http://pinterest.com/pin/create/button/?url=https%3A%2F%2Fblog.canauri.com%2Fbitpaymer-ransomware-making-noise-in-world-of-cybersecurity%3Futm_medium%3Dsocial%26utm_source%3Dpinterest&media=) [![Share on Email](https://static.hubspot.com/final/img/common/icons/social/email-24x24.png)](mailto:?subject=Check%20out%20https%3A%2F%2Fblog.canauri.com%2Fbitpaymer-ransomware-making-noise-in-world-of-cybersecurity%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fblog.canauri.com%2Fbitpaymer-ransomware-making-noise-in-world-of-cybersecurity%3Futm_medium%3Dsocial%26utm_source%3Demail) ### Subscribe to Email Updates ### Recent Posts ### Posts by Topic - [Cyber Threats (164)](https://blog.canauri.com/topic/cyber-threats) - [Ransomware (91)](https://blog.canauri.com/topic/ransomware) - [Data Breach (68)](https://blog.canauri.com/topic/data-breach) - [Business (49)](https://blog.canauri.com/topic/business) - [Scams (19)](https://blog.canauri.com/topic/scams) - [cybersecurity (14)](https://blog.canauri.com/topic/cybersecurity) - [Cyber Attack (10)](https://blog.canauri.com/topic/cyber-attack) - [Uncategorized (9)](https://blog.canauri.com/topic/uncategorized) - [Breach (8)](https://blog.canauri.com/topic/breach) - [Data (8)](https://blog.canauri.com/topic/data) - [Phishing (7)](https://blog.canauri.com/topic/phishing) - [cyber (5)](https://blog.canauri.com/topic/cyber) - [decrypters (5)](https://blog.canauri.com/topic/decrypters) - [security (5)](https://blog.canauri.com/topic/security) - [Insider (4)](https://blog.canauri.com/topic/insider) - [Ransomware Decrypters (4)](https://blog.canauri.com/topic/ransomware-decrypters) - [cybercrime (4)](https://blog.canauri.com/topic/cybercrime) - [managed service providers (4)](https://blog.canauri.com/topic/managed-service-providers) - [ransom (4)](https://blog.canauri.com/topic/ransom) - [ransomware ransom (4)](https://blog.canauri.com/topic/ransomware-ransom) - [Banking Trojans (3)](https://blog.canauri.com/topic/banking-trojans) - [Firewalls (3)](https://blog.canauri.com/topic/firewalls) - [Press Release (3)](https://blog.canauri.com/topic/press-release) - [Ransomware as a Service (3)](https://blog.canauri.com/topic/ransomware-as-a-service) - [WannaCry (3)](https://blog.canauri.com/topic/wannacry) - [Zero Day Vulnerability (3)](https://blog.canauri.com/topic/zero-day-vulnerability) - [business email compromise (3)](https://blog.canauri.com/topic/business-email-compromise) - [cyber security (3)](https://blog.canauri.com/topic/cyber-security) - [decryptors (3)](https://blog.canauri.com/topic/decryptors) - [ransomware attack (3)](https://blog.canauri.com/topic/ransomware-attack) - [BlueKeep (2)](https://blog.canauri.com/topic/bluekeep) - [CEO fraud (2)](https://blog.canauri.com/topic/ceo-fraud) - [COVID-19 (2)](https://blog.canauri.com/topic/covid-19) - [COVID-19 cybersecurity (2)](https://blog.canauri.com/topic/covid-19-cybersecurity) - [Cyberattack (2)](https://blog.canauri.com/topic/cyberattack) - [Fileless (2)](https://blog.canauri.com/topic/fileless) - [Fileless Malware (2)](https://blog.canauri.com/topic/fileless-malware) - [Fileless Ransomare (2)](https://blog.canauri.com/topic/fileless-ransomare) - [Fortnite vulnerability (2)](https://blog.canauri.com/topic/fortnite-vulnerability) - [MSPs (2)](https://blog.canauri.com/topic/msps) - [Patch (2)](https://blog.canauri.com/topic/patch) - [Small and Medium Enterprises Cybersecurity (2)](https://blog.canauri.com/topic/small-and-medium-enterprises-cybersecurity) - [Spear Phishing (2)](https://blog.canauri.com/topic/spear-phishing) - [WFH (2)](https://blog.canauri.com/topic/wfh) - [Wi-Fi Connections (2)](https://blog.canauri.com/topic/wi-fi-connections) - [Zero Day (2)](https://blog.canauri.com/topic/zero-day) - [Zero Day Attacks (2)](https://blog.canauri.com/topic/zero-day-attacks) - [bitcoin (2)](https://blog.canauri.com/topic/bitcoin) - [bitcoins (2)](https://blog.canauri.com/topic/bitcoins) - [cryptocurrency (2)](https://blog.canauri.com/topic/cryptocurrency) - [cryptocurrency mining (2)](https://blog.canauri.com/topic/cryptocurrency-mining) - [cryptojacking (2)](https://blog.canauri.com/topic/cryptojacking) - [cyber attacks on hospitals (2)](https://blog.canauri.com/topic/cyber-attacks-on-hospitals) - [cybersecurity jobs (2)](https://blog.canauri.com/topic/cybersecurity-jobs) - [defray (2)](https://blog.canauri.com/topic/defray) - [defray ransomware (2)](https://blog.canauri.com/topic/defray-ransomware) - [fortnite (2)](https://blog.canauri.com/topic/fortnite) - [gandcrab ransomware (2)](https://blog.canauri.com/topic/gandcrab-ransomware) - [hacking (2)](https://blog.canauri.com/topic/hacking) - [health (2)](https://blog.canauri.com/topic/health) - [healthcare (2)](https://blog.canauri.com/topic/healthcare) - [hospital cybersecurity (2)](https://blog.canauri.com/topic/hospital-cybersecurity) - [mac malware (2)](https://blog.canauri.com/topic/mac-malware) - [municipalities cyberattack (2)](https://blog.canauri.com/topic/municipalities-cyberattack) - [municipalities ransomware (2)](https://blog.canauri.com/topic/municipalities-ransomware) - [passwords (2)](https://blog.canauri.com/topic/passwords) - [ransomware attacks (2)](https://blog.canauri.com/topic/ransomware-attacks) - [ransomware normal (2)](https://blog.canauri.com/topic/ransomware-normal) - [scareware (2)](https://blog.canauri.com/topic/scareware) - [two-factor authentication (2)](https://blog.canauri.com/topic/two-factor-authentication) - [2018 cybersecurity (1)](https://blog.canauri.com/topic/2018-cybersecurity) - [2018 cybersecurity review (1)](https://blog.canauri.com/topic/2018-cybersecurity-review) - [2019 cybersecurity predictions (1)](https://blog.canauri.com/topic/2019-cybersecurity-predictions) - [2019 predictions (1)](https://blog.canauri.com/topic/2019-predictions) - [2020 Cybersecurity Predictions (1)](https://blog.canauri.com/topic/2020-cybersecurity-predictions) - [2FA (1)](https://blog.canauri.com/topic/2fa) - [Arizona (1)](https://blog.canauri.com/topic/arizona) - [Arizona beverages ransomware (1)](https://blog.canauri.com/topic/arizona-beverages-ransomware) - [BEC (1)](https://blog.canauri.com/topic/bec) - [BEC Attacks (1)](https://blog.canauri.com/topic/bec-attacks) - [BitPaymer (1)](https://blog.canauri.com/topic/bitpaymer) - [BlueKeep Exploit (1)](https://blog.canauri.com/topic/bluekeep-exploit) - [BlueKeep Vulnerability (1)](https://blog.canauri.com/topic/bluekeep-vulnerability) - [CISO (1)](https://blog.canauri.com/topic/ciso) - [Chief Information Security Officer (1)](https://blog.canauri.com/topic/chief-information-security-officer) - [Coronavirus (1)](https://blog.canauri.com/topic/coronavirus) - [Coronavirus scams (1)](https://blog.canauri.com/topic/coronavirus-scams) - [CryptoMix (1)](https://blog.canauri.com/topic/cryptomix) - [Cyber Liability Insurance (1)](https://blog.canauri.com/topic/cyber-liability-insurance) - [DLL (1)](https://blog.canauri.com/topic/dll) - [DLL CryptoMix (1)](https://blog.canauri.com/topic/dll-cryptomix) - [Data Leak (1)](https://blog.canauri.com/topic/data-leak) - [Deepfakes (1)](https://blog.canauri.com/topic/deepfakes) - [Dridex (1)](https://blog.canauri.com/topic/dridex) - [ERP (1)](https://blog.canauri.com/topic/erp) - [ERP Systems (1)](https://blog.canauri.com/topic/erp-systems) - [Enterprise Resource Planning (1)](https://blog.canauri.com/topic/enterprise-resource-planning) - [Exactis (1)](https://blog.canauri.com/topic/exactis) - [FIFA (1)](https://blog.canauri.com/topic/fifa) - [Fortnite ransomware (1)](https://blog.canauri.com/topic/fortnite-ransomware) - [GandCrab (1)](https://blog.canauri.com/topic/gandcrab) - [Google (1)](https://blog.canauri.com/topic/google) - [Have I been pwned (1)](https://blog.canauri.com/topic/have-i-been-pwned) - [Hospitals Ransomware (1)](https://blog.canauri.com/topic/hospitals-ransomware) - [Kirk (1)](https://blog.canauri.com/topic/kirk) - [Kirk Ransomware (1)](https://blog.canauri.com/topic/kirk-ransomware) - [LockBit (1)](https://blog.canauri.com/topic/lockbit) - [LockerGoga (1)](https://blog.canauri.com/topic/lockergoga) - [LockerGoga Ransomware (1)](https://blog.canauri.com/topic/lockergoga-ransomware) - [M&A (1)](https://blog.canauri.com/topic/ma) - [Malware (1)](https://blog.canauri.com/topic/malware) - [Marriott data breach (1)](https://blog.canauri.com/topic/marriott-data-breach) - [NASA (1)](https://blog.canauri.com/topic/nasa) - [NASA Data Breach (1)](https://blog.canauri.com/topic/nasa-data-breach) - [NCSAM (1)](https://blog.canauri.com/topic/ncsam) - [National Cyber Security Awareness Month (1)](https://blog.canauri.com/topic/national-cyber-security-awareness-month) - [Norsk (1)](https://blog.canauri.com/topic/norsk) - [Norsk Hydro (1)](https://blog.canauri.com/topic/norsk-hydro) - [PGA (1)](https://blog.canauri.com/topic/pga) - [Patch Tuesday (1)](https://blog.canauri.com/topic/patch-tuesday) - [Petya (1)](https://blog.canauri.com/topic/petya) - [Petya Ransomware (1)](https://blog.canauri.com/topic/petya-ransomware) - [Quora data breach (1)](https://blog.canauri.com/topic/quora-data-breach) - [RDP (1)](https://blog.canauri.com/topic/rdp) - [Remote Desktop Protocol (1)](https://blog.canauri.com/topic/remote-desktop-protocol) - [Remote workforce (1)](https://blog.canauri.com/topic/remote-workforce) - [RobbinHood Ransomware (1)](https://blog.canauri.com/topic/robbinhood-ransomware) - [Robbinhood (1)](https://blog.canauri.com/topic/robbinhood) - [SEC (1)](https://blog.canauri.com/topic/sec) - [SME (1)](https://blog.canauri.com/topic/sme) - [SME Cybersecurity (1)](https://blog.canauri.com/topic/sme-cybersecurity) - [SamSam (1)](https://blog.canauri.com/topic/samsam) - [SamSam Ransomware (1)](https://blog.canauri.com/topic/samsam-ransomware) - [Security Breach Notification Laws (1)](https://blog.canauri.com/topic/security-breach-notification-laws) - [Small and Medium Enterprises (1)](https://blog.canauri.com/topic/small-and-medium-enterprises) - [Sorebrect (1)](https://blog.canauri.com/topic/sorebrect) - [Star Trek (1)](https://blog.canauri.com/topic/star-trek) - [Syrk ransomware (1)](https://blog.canauri.com/topic/syrk-ransomware) - [Target (1)](https://blog.canauri.com/topic/target) - [Vidar (1)](https://blog.canauri.com/topic/vidar) - [Vidar infostealer (1)](https://blog.canauri.com/topic/vidar-infostealer) - [Vidar trojan (1)](https://blog.canauri.com/topic/vidar-trojan) - [WCry (1)](https://blog.canauri.com/topic/wcry) - [Wana Decryptor (1)](https://blog.canauri.com/topic/wana-decryptor) - [WanaCry (1)](https://blog.canauri.com/topic/wanacry) - [WanaDecryptor (1)](https://blog.canauri.com/topic/wanadecryptor) - [WannaCry 2.0 (1)](https://blog.canauri.com/topic/wannacry-2-0) - [World Cup (1)](https://blog.canauri.com/topic/world-cup) - [Yahoo (1)](https://blog.canauri.com/topic/yahoo) - [Yahoo Data Breach (1)](https://blog.canauri.com/topic/yahoo-data-breach) - [anatova (1)](https://blog.canauri.com/topic/anatova) - [anatova ransomware (1)](https://blog.canauri.com/topic/anatova-ransomware) - [arizona beverages (1)](https://blog.canauri.com/topic/arizona-beverages) - [atlanta (1)](https://blog.canauri.com/topic/atlanta) - [automobile (1)](https://blog.canauri.com/topic/automobile) - [automobile hacking (1)](https://blog.canauri.com/topic/automobile-hacking) - [azorult trojan (1)](https://blog.canauri.com/topic/azorult-trojan) - [banking trojan (1)](https://blog.canauri.com/topic/banking-trojan) - [bentley (1)](https://blog.canauri.com/topic/bentley) - [bitpaymer ransomware (1)](https://blog.canauri.com/topic/bitpaymer-ransomware) - [blackmail (1)](https://blog.canauri.com/topic/blackmail) - [budgeting (1)](https://blog.canauri.com/topic/budgeting) - [capital one (1)](https://blog.canauri.com/topic/capital-one) - [capital one data breach (1)](https://blog.canauri.com/topic/capital-one-data-breach) - [car hacking (1)](https://blog.canauri.com/topic/car-hacking) - [care (1)](https://blog.canauri.com/topic/care) - [chicago tribune (1)](https://blog.canauri.com/topic/chicago-tribune) - [collection (1)](https://blog.canauri.com/topic/collection) - [collection 1 (1)](https://blog.canauri.com/topic/collection-1) - [coronavirus cybersecurity (1)](https://blog.canauri.com/topic/coronavirus-cybersecurity) - [coronavirus phishing (1)](https://blog.canauri.com/topic/coronavirus-phishing) - [coronavirus ransomware (1)](https://blog.canauri.com/topic/coronavirus-ransomware) - [crypto (1)](https://blog.canauri.com/topic/crypto) - [crytocurrency hack (1)](https://blog.canauri.com/topic/crytocurrency-hack) - [currency (1)](https://blog.canauri.com/topic/currency) - [cyber insurance (1)](https://blog.canauri.com/topic/cyber-insurance) - [cybersecurity budgeting (1)](https://blog.canauri.com/topic/cybersecurity-budgeting) - [cybersecurity coronavirus (1)](https://blog.canauri.com/topic/cybersecurity-coronavirus) - [cybersecurity predictions (1)](https://blog.canauri.com/topic/cybersecurity-predictions) - [cybersecurity ventures (1)](https://blog.canauri.com/topic/cybersecurity-ventures) - [cybersecurity working remotely (1)](https://blog.canauri.com/topic/cybersecurity-working-remotely) - [dharma (1)](https://blog.canauri.com/topic/dharma) - [dharma ransomware (1)](https://blog.canauri.com/topic/dharma-ransomware) - [financial services (1)](https://blog.canauri.com/topic/financial-services) - [financial services data breach (1)](https://blog.canauri.com/topic/financial-services-data-breach) - [government cyberattack (1)](https://blog.canauri.com/topic/government-cyberattack) - [holiday shopping (1)](https://blog.canauri.com/topic/holiday-shopping) - [hospitals hit with ransomware (1)](https://blog.canauri.com/topic/hospitals-hit-with-ransomware) - [iEncrypt (1)](https://blog.canauri.com/topic/iencrypt) - [insider trading (1)](https://blog.canauri.com/topic/insider-trading) - [insurance (1)](https://blog.canauri.com/topic/insurance) - [laundering (1)](https://blog.canauri.com/topic/laundering) - [leak (1)](https://blog.canauri.com/topic/leak) - [los angeles times (1)](https://blog.canauri.com/topic/los-angeles-times) - [man in the disk (1)](https://blog.canauri.com/topic/man-in-the-disk) - [man in the disk attacks (1)](https://blog.canauri.com/topic/man-in-the-disk-attacks) - [maritime cybersecurity (1)](https://blog.canauri.com/topic/maritime-cybersecurity) - [maze ransomware (1)](https://blog.canauri.com/topic/maze-ransomware) - [pensacola florida (1)](https://blog.canauri.com/topic/pensacola-florida) - [phobos (1)](https://blog.canauri.com/topic/phobos) - [phobos ransomware (1)](https://blog.canauri.com/topic/phobos-ransomware) - [quarter 1 2019 ransomware (1)](https://blog.canauri.com/topic/quarter-1-2019-ransomware) - [raccoon stealer (1)](https://blog.canauri.com/topic/raccoon-stealer) - [ransomware data breaches (1)](https://blog.canauri.com/topic/ransomware-data-breaches) - [ransomware defined (1)](https://blog.canauri.com/topic/ransomware-defined) - [ransomware epidemic (1)](https://blog.canauri.com/topic/ransomware-epidemic) - [ransomware hits municipalities (1)](https://blog.canauri.com/topic/ransomware-hits-municipalities) - [ransomware statistics (1)](https://blog.canauri.com/topic/ransomware-statistics) - [riviera beach ransomware attack (1)](https://blog.canauri.com/topic/riviera-beach-ransomware-attack) - [ryuk (1)](https://blog.canauri.com/topic/ryuk) - [ryuk ransomware (1)](https://blog.canauri.com/topic/ryuk-ransomware) - [scammers (1)](https://blog.canauri.com/topic/scammers) - [scams targeting holiday shoppers (1)](https://blog.canauri.com/topic/scams-targeting-holiday-shoppers) - [securities and exchange commission (1)](https://blog.canauri.com/topic/securities-and-exchange-commission) - [sextortion (1)](https://blog.canauri.com/topic/sextortion) - [shipping industry (1)](https://blog.canauri.com/topic/shipping-industry) - [snake ransomware (1)](https://blog.canauri.com/topic/snake-ransomware) - [social engineering (1)](https://blog.canauri.com/topic/social-engineering) - [southwire (1)](https://blog.canauri.com/topic/southwire) - [stop paying the ransom (1)](https://blog.canauri.com/topic/stop-paying-the-ransom) - [tips for working remotely (1)](https://blog.canauri.com/topic/tips-for-working-remotely) - [tribune (1)](https://blog.canauri.com/topic/tribune) - [ursnif (1)](https://blog.canauri.com/topic/ursnif) - [wall street journal (1)](https://blog.canauri.com/topic/wall-street-journal) - [what is ransomware (1)](https://blog.canauri.com/topic/what-is-ransomware) - [working from home (1)](https://blog.canauri.com/topic/working-from-home) - [working remotely (1)](https://blog.canauri.com/topic/working-remotely) see all ##### Contact [415 12th Ave SE, Suite 201 Cedar Rapids, IA 52401](https://www.google.com/maps/place/415+12th+Ave+SE+%23201,+Cedar+Rapids,+IA+52401/@41.9710436,-91.6582952,17z/data=!3m1!4b1!4m5!3m4!1s0x87e4f73f67891f6d:0x38f71e45a9fa7c1f!8m2!3d41.9710436!4d-91.6561065) [319-383-0165](tel:319-383-0165) [support@getcryptostopper.com](mailto:support@getcryptostopper.com) Facebook Twitter Linkedin YouTube - Products - [CryptoStopper™](https://www.getcryptostopper.com/cryptostopper/) - [Endpoint Security](https://www.getcryptostopper.com/tools/endpoint-security/) - Free Tools - [Ransomware Simulator](https://www.getcryptostopper.com/ransomware-simulator/) - [Network Tools](https://www.getcryptostopper.com/free-network-tools/) - [Ransomware Decryptors](https://www.getcryptostopper.com/ransomware-decryptors/) - Company - [About](https://www.getcryptostopper.com/about/) - [Careers](https://www.getcryptostopper.com/careers/) - [Contact](https://www.getcryptostopper.com/contact/) © Copyright WatchPoint Data, All Rights Reserved   |   [Terms](https://www.getcryptostopper.com/terms)