This week on Dark Rhiino Security’s Security Confidential podcast, Tyler Smith breaks down what ransomware is and answers basic questions. Should you pay ransomware if you are attacked, and how can you prevent being attacked? We have all the answers on this week’s episode of Security Confidential.
Audio:
Important Links:
Transcript
Dark Rhiino Security (Intro)
Welcome to Security Confidential by Dark Rhiino Security, where we get together and talk about all things information security.
Tyler Smith
I’m Tyler Smith, an information security practitioner at Dark Rhiino Security.
Sunaina Tandon
And I’m Sunaina Tandon. Today we’re going to talk about ransomware. So Tyler, how does a ransomware attack work?
Tyler Smith
In its simplest terms, a ransomware attack happens when someone clicks on a link. Their machine is compromised, files get encrypted, and they must pay for a key to unlock them.
Sunaina Tandon
So if you are attacked, should you pay the ransom?
Tyler Smith
Paying is never recommended. It doesn’t guarantee recovery—malware can be faulty. It also incentivizes criminals. But in critical sectors like healthcare or infrastructure, organizations sometimes feel they have no choice.
Sunaina Tandon
Can you tell me about an experience you’ve had with ransomware attacks?
Tyler Smith
One client had their entire network and backups encrypted because everything was connected via SMB with no segmentation. They paid the ransom, got hit again two weeks later, and the attackers even offered a “repeat customer discount.”
The second time, we were able to extract the key from the malware and decrypt everything. That’s when they finally took security seriously.
Sunaina Tandon
So, what’s your best advice to protect against ransomware?
Tyler Smith
First: security awareness. Humans are the weakest link. Educating users is critical.
Second: deploy strong endpoint protection like antivirus or EDR.
Third: segment your network and limit access between systems.
Ransomware isn’t going away—it’s getting worse. There’s even ransomware-as-a-service now. If you haven’t handled the basics, start now.
Sunaina Tandon
Well, thank you for coming today.
Tyler Smith
Absolutely.
Sunaina Tandon
And thank you all for listening. Check the show notes for resources, subscribe, and we’ll see you next time.
Check out the other episodes in Season 4:
Ep. 0 Dark Rhino Security – Cyber Basics: The Rundown on Ransomware
Ep. 1 Rob Duhart Jr – In Cybersecurity There are Builders and Breakers, You Need Both!
Ep. 2 Rob Oden – Is a Traditional Computer Science path necessary for Cybersecurity?
Ep. 3 Chad Weinman – Compliance does not correlate to Cybersecurity
Ep. 4 Rob Oden (part 2) – Should the office of the CISO be separate from IT?
Ep. 5 Ross Young – Foreign Cyber Espionage Capabilities
Ep. 6 Ilya Bodner – How to land your first customer
Ep. 7 Samara Williams – Why is there a lack of people going into STEM?
Ep. 8 Amelia Jarboe – A passion for protecting people with Cybersecurity
Ep. 9 Hans Vargas-Silva – Compliance is a low bar for Cybersecurity
Ep. 10 Fredrik Oedegaardstuen – Cautionary advice on Automation
About Tyler Smith
Tyler Smith, co-founder, CTO, and President of Dark Rhiino Security Inc., a leader in the computer security industry. Tyler shares insights from his journey building three successful companies, including valuable lessons from his experience leading Dark Rhiino.
He is a veteran of the US Marine Corps, where he served as an Infantry Rifleman and deployed to multiple countries in support of the Global War on Terror. He studied Political Science and International Studies, Security and Intelligence at The Ohio State University. He has worked in security and technology since 2011 and has worked in technical roles for Apple Inc., Ohio Health, Reid Elsevier Technology Services/Lexis Nexis, Toyota, Federated Investors, Honda of America Mfg, to name a few.
About Us:
Dark Rhiino Security’s Security Confidential is a weekly Cybersecurity podcast where Host, Manoj Tandon, talks to Infosec and Cybersecurity professionals about the current issues going on in our industry. Guests are able to share their stories about how they began their journey into cybersecurity and connect with our audience. Listeners are able to tune in through Spotify, Apple Podcasts, Google Podcasts, Amazon Music, iHeartRadio, Youtube, LinkedIn, and more.
For inquiries, please email media@darkrhiinosecurity.com
Share and spread the word!
