Cybercrime is very much a psychological game, and ransomware is no different. Psychology plays a role in almost all aspects of an attack, from determining whether phishing messages effectively grab the attention of target users to whether victims pay the ransom.
Psychology of ransomware distribution
A majority of ransomware is distributed through phishing emails, instant message, and SMS. Distributors use tactics designed to make a victim click a link quickly. They create a sense of urgency that prompts an immediate response. This preys on a person’s emotions, especially fear. Victims are told they might lose access to an account; that an unauthorized payment has been made; or medical benefits are about to change. These things scare victims into clicking the link and, in the process, getting a dose of ransomware.
Ransomware distributors also understand victims’ desires. They know that most people would take an easy path to money, recognition, or free merchandise if they could, and they offer the break their targets are looking for.
Psychology of ransomware demands
Ransomware demands rely primarily on the fear of losing data. Infections are often noticed when access to data is needed. Suddenly, rather than seeing the files, a ransom message is displayed. Victims fear losing that data. Even when backups are available, they fear not being able to restore all data, and that, if a restore fails, it would be impossible to get the files back from the extortionist.
Fear is also used in ransom messages that display warnings of illegal or embarrassing behavior. Those accused of a crime from fake FBI warnings or messages regarding pornography viewing are loath to seek help from others in restoring files or remediating the ransomware because they fear that their activities could be put under a microscope and that friends, family, or coworkers might think less of them. Many victims fell prey to these messages because police phishing can create anxiety or panic. Victims see the email listing a fine and want to dispute it, so they click the link to obtain the details.