Although ransomware impacts financial institutions of all sizes, it disproportionately impacts smaller banks that may not have sufficient resources to protect against these attacks.2 Ransomware is often delivered through phishing emails or through the unauthorized installation of malicious programs onto an organization's systems, known as "drive-bydownloads."
These tactics take advantage of those with access to a bank's internal systems, whose actions, while perhaps well-intentioned, enable the ransomware cyberattack to occur.