Large-Scale Ransomware Campaign Targets Indian Businesses via "Sorry" Email Scam A fast-spreading ransomware campaign is exploiting a deceptively simple tactic to infiltrate organizations across India. Cybercriminals are distributing malware through emails with the subject line "Sorry," tricking employees into opening attachments that grant hackers immediate access to corporate systems. Within seconds, the ransomware encrypts critical data and demands Bitcoin payments for decryption. Over the past three days, the attack has compromised nearly 44,000 IP addresses and control panels, making it one of the most significant ransomware threats in recent months. The campaign primarily targets large companies, financial institutions, and businesses using corporate email accounts, where a single breach can expose entire networks. ### How the Attack Unfolds 1. An employee receives an email with the subject "Sorry" from a seemingly legitimate sender. 2. Opening the email or downloading its attachment silently installs ransomware. 3. The malware rapidly encrypts files, locks system access, and displays a ransom demand in Bitcoin. 4. The infection spreads across connected systems, crippling operations by blocking access to customer databases, financial records, payroll systems, and critical business data. ### Impact and Risks Ransomware attacks can paralyze businesses for weeks, with recovery efforts often complicated by faulty decryption keys even if victims pay. Authorities warn that paying ransoms does not guarantee data restoration and may mark organizations for future attacks. Cybersecurity experts emphasize that the campaign relies on social engineering rather than technical exploits, making employee awareness a critical defense. The rapid spread affecting thousands of systems in just days highlights the urgency for organizations to verify suspicious emails, update security protocols, and maintain offline backups.