--- title: Greedy ransomware crews return for seconds after victims... description: A Proofpoint study reveals that over a third of ransomware victims who pay the initial ransom are subsequently re-extorted by the same criminal groups. Some... canonical: https://daily.dev/posts/greedy-ransomware-crews-return-for-seconds-after-victims-cough-up-first-extortion-payments-r0upqxej0 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Greedy ransomware crews return for seconds after victims cough up first extortion payments | daily.dev og:description: A Proofpoint study reveals that over a third of ransomware victims who pay the initial ransom are subsequently re-extorted by the same criminal groups. Some... og:url: https://daily.dev/posts/greedy-ransomware-crews-return-for-seconds-after-victims-cough-up-first-extortion-payments-r0upqxej0 og:image: https://api.daily.dev/og/posts/R0uPQXeJ0.png og:image:alt: Greedy ransomware crews return for seconds after victims cough up first extortion payments og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Greedy ransomware crews return for seconds after victims cough up first extortion payments **[The Register](https://daily.dev/sources/theregister)** · 3 min read · 0 upvotes · 0 comments ## Summary A Proofpoint study reveals that over a third of ransomware victims who pay the initial ransom are subsequently re-extorted by the same criminal groups. Some victims also never recovered their files despite paying. The findings highlight the risks of paying ransomware demands and the increasingly predatory behavior of ransomware crews. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [If you pay a hacker’s ransom, chances are that they’ll come back for more](https://daily.dev/posts/if-you-pay-a-hacker-s-ransom-chances-are-that-they-ll-come-back-for-more-s5y67i6nt) · TechCrunch · 0 upvotes · 0 comments - [Paying ransomware attackers is making companies more vulnerable](https://daily.dev/posts/paying-ransomware-attackers-is-making-companies-more-vulnerable-ec935wmil) · TechCentral · 0 upvotes · 0 comments - [Ransomware recovery perils: 40% of paying victims still lose their data](https://daily.dev/posts/ransomware-recovery-perils-40-of-paying-victims-still-lose-their-data-knw92zvey) · CSO Online · 0 upvotes · 0 comments - [Every Ransomware Attack Has a Backstory](https://daily.dev/posts/every-ransomware-attack-has-a-backstory-bzo7w3b2j) · Huntress Blog · 0 upvotes · 0 comments --- Tags: [#ransomware](https://daily.dev/tags/ransomware) [View this post on daily.dev](https://daily.dev/posts/greedy-ransomware-crews-return-for-seconds-after-victims-cough-up-first-extortion-payments-r0upqxej0) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Greedy ransomware crews return for seconds after victims cough up first extortion payments","url":"https://daily.dev/posts/greedy-ransomware-crews-return-for-seconds-after-victims-cough-up-first-extortion-payments-r0upqxej0","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/greedy-ransomware-crews-return-for-seconds-after-victims-cough-up-first-extortion-payments-r0upqxej0"},"datePublished":"2026-07-22T11:54:27.927Z","dateModified":"2026-07-22T11:54:45.154Z","description":"A Proofpoint study reveals that over a third of ransomware victims who pay the initial ransom are subsequently re-extorted by the same criminal groups. Some...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/127b2822cfe7ce85d28bbc57570ff28e?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/127b2822cfe7ce85d28bbc57570ff28e?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"The Register","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Register","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/66aa2113fdad463992ffcbf0e8963fda","url":"https://daily.dev/sources/theregister"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/greedy-ransomware-crews-return-for-seconds-after-victims-cough-up-first-extortion-payments-r0upqxej0","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ransomware","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Register","item":"https://daily.dev/sources/theregister"},{"@type":"ListItem","position":3,"name":"Greedy ransomware crews return for seconds after victims cough up first extortion payments"}]} ```