In a new case of social engineering, certain ransomware attackers sent their victims holiday notes wishing them a merry Christmas and offering a limited-time discount on their ransom demands. The Maze ransomware group, which claimed responsibility for the December attack against the City of Pensacola, told Bleeping Computer that they were slashing their million-dollar demand from the Florida city to $500,000, as part of a “New Year celebration.” They also stated that they offered a 25% discount to their other ransomware victims for payments received between Christmas and New Year’s Eve. Another group – those behind the Sodinokibi ransomware attacks – sent its victims holiday messages that did not offer a discount, but did encourage quick payments in the spirit of the new year, writing, “Merry Christmas and Happy Holidays everyone! You have a great opportunity to enter the new year, leaving all the bad in the outgoing year. I advise you to write to us as soon as possible and not waste your precious time that you can spend with your family.” The note goes on to urge the victims to negotiate and pay their ransoms as soon as possible.
