Ransomware: Innovations in extortion tactics Ransomware attacks continue to evolve, with attackers developing new tactics and techniques to increase the likelihood of harvesting ransoms. In 2023, NÚKIB observed the first case of an extortion-only ransomware attack, where attacker exfiltrated the victim’s data and threatened to publish it unless a ransom was paid. This tactic is an evolution of the already established tactics of double or multiple extortion strategies. The ransomware-as-a-service model also remains prevalent. 24 It is highly likely (75–85 %) that attackers will continue to develop innovative methods to coerce their targets into paying ransoms. However, payment of a ransom never guarantees the resolution of the incident or restoration of data, and it provides attackers with resources to carry out further malicious activities. Efforts to discourage the payment of ransoms have culminated in a statement by the International Counter Ransomware Initiative pledging to refrain from paying ransoms—a commitment that the Czech Republic has also joined.