Ransomware attackers are increasingly targeting mid-level managers—particularly 40-something IT managers—rather than CEOs, as these individuals often have significant business access and decision-making authority related to payments and sensitive information. A Zscaler study of 351 victims revealed that nearly two-thirds held managerial roles, primarily in departments like finance, sales, and HR, with attackers using detailed organizational mapping to identify these key targets. This shift reflects a focus on “business privilege” to expedite ransom payments, with campaigns growing more targeted and focused on extortion and data theft rather than indiscriminate encryption.
Ransomware Gangs Skip the CEO, Head Straight for the 40-Something IT Manager
