Ransomware gets personal: physical threats emerge

Tim Beasley, a senior incident response consultant at Semperis, shared a concerning experience related to a cyberattack. While investigating an attack linked to the Russian group Midnight Blizzard, he received a package containing Russian nesting dolls and other souvenirs. This gesture, which he attributes to the group associated with the Russian intelligence agency, made him reflect on the serious implications of digital threats that now have a physical component.

Receiving a package with items suggesting that attackers know where their victim is located clearly indicates that cybercriminals are taking their extortion strategies to a new level. Such tactics not only aim to extort money but also seek to instill fear and trauma both mentally and physically in victims, potentially leading to increased pressure to comply with the attackers' demands.

## Why it matters This development is alarming because it shows that ransomware attacks are evolving. It’s no longer just about compromising systems and demanding ransoms; criminals are now using physical threats to manipulate their victims, which could have devastating effects on personal security and the mental health of those affected.

## What we know Cybercriminals have begun integrating more personal intimidation tactics into their attacks, representing a significant shift in how they operate. Beasley’s experience highlights the need for organizations to prepare not only for digital attacks but also for potential real-world repercussions.

## What’s still unclear It remains unconfirmed whether the package was indeed sent by the Midnight Blizzard group, nor what other measures organizations are taking to protect their employees from such threats that cross the line between digital and physical.