--- title: Ransomware Is the Bootleg Liquor of the 21st Century description: Much like during Prohibition, criminals are swarming to the lucrative ransomware business. Learn how ransomware became the IT security threat of the 21st century canonical_url: https://www.acronis.com/en/blog/posts/ransomware-bootleg-liquor-21st-century/ locale: en last_updated: 2026-10-27 --- [Acronis Blog](https://www.acronis.com/en/blog/) # Ransomware Is the Bootleg Liquor of the 21st Century Criminals are swarming to the ransomware business — and targeting you — because it’s highly profitable. Last week, we offered a high-level overview of the malware menace known as ransomware: what it’s like to be victimized by a ransomware attack (it’s no fun to discover that your hard drive has been encrypted by a malicious program), how the criminals extort money from businesses and consumers (if you don’t pay an online ransom, you never get your files back), and how big this illegal business has become (ransomware criminals will extort $1B from victims in 2016, says the FBI). [Learn More](https://www.acronis.com/en/products/cyber-protect/) [![Image 2: James Slaby](https://staticfiles.acronis.com/images/content/36117e925e5b5e501a197e22a2959987.png)](https://www.acronis.com/en/blog/authors/james-slaby/ "James Slaby") [James Slaby](https://www.acronis.com/en/blog/authors/james-slaby/) 4 min read Last updated 28 November 2019 _Criminals are swarming to the ransomware business — and targeting you — because it’s highly profitable._ Last week, we offered a high-level overview of the malware menace known as [ransomware](https://www.acronis.com/en-us/ransomware-protection/): what it’s like to be victimized by a ransomware attack (it’s no fun to discover that your hard drive has been encrypted by a malicious program), how the criminals extort money from businesses and consumers (if you don’t pay an online ransom, you never get your files back), and how big this illegal business has become (ransomware criminals will extort $1B from victims in 2016, says the FBI). So, how did ransomware suddenly become the biggest IT security threat of the 21st century, and why isn’t your anti-virus (AV) software able to stop it? The short answer is, _“Follow the money:”_ Ransomware has become so widespread and tough to defeat because it’s an extremely profitable illicit business, much as bootlegging of illegal alcohol was during America’s Prohibition era. Here are a few reasons why this high-tech racket is exploding, and why you need to shore up your defenses against it: ### The Evolution of Malware * **Malware (any software designed to disrupt, damage or steal sensitive information from computer systems) in general has evolved from its roots as a cottage industry** into a much more industrialized enterprise, with production and distribution methods similar to the legitimate software industry. Writing effective malware still requires arcane programming skills and vast knowledge of hardware, operating systems, applications, networks and their defenses. But even dumb criminals can make money at the game simply by purchasing kits on the Dark Web, snapping together new viruses and distributing them with very little technical know-how. Malware in general, and ransomware in particular, has gone pre-fab. It’s like an aspiring burglar, who instead of spending years learning the fine art of lock-picking, now simply goes to a seedy flea market and buys a set of skeleton keys. Ransomware is the perfect tool for anyone who want to get into online extortion but isn’t skilled enough to write their own code. ### Ransomware Can Be Delivered in a Variety of Ways * Today’s most popular ransomware distribution method is getting unwary users to click on malicious attachments or links in phishing emails. Other methods include embedding malware in pirated software or entertainment downloaded from BitTorrent sites; performing a drive-by download when a user visits an adult-content site or clicks on a fake online ad; exploiting unpatched vulnerabilities in server software; and distributing USB drives that bear a malware payload. You can be sure the bad guys are dreaming up new ways to infect your machines at this very minute. ### Ransomware Is Lucrative * **Profits from the lucrative ransomware trade** – one ransomware author and distributor raked in $121M in the first nine months of 2016, according to McAfee — **are being re-invested into developing new variants that are smarter at defeating IT security measures**. Techniques like dormancy — going to sleep for a few days after a successful infection before firing up and running — can lull behavioral detection systems into ignoring some infections. Many species of ransomware delete “zone identifiers” that AV software uses to label the origin of a downloaded file and so decide if a new executable is safe to run. Still others will kill critical system processes to prevent AV scans, embed themselves by creating Windows registry keys and infiltrating startup files to ensure they are always executed and maintain control of the system after a reboot. ### There’s Even an Aftermarket for Ransomware * **The ransomware ecosystem includes criminals selling add-ons to other criminals to make their malware more effective.** For instance, it’s now easy to buy cheap “wrapping” services on the Dark Web: for a few bucks, a black-market service provider will take your ransomware, enclose it in an obfuscating envelope that makes it appear harmless to signature-based AV scanners, and even demonstrate how it fools the dozen most popular AV programs. ### Crypto-currency Makes It Easier * **Anonymous online crypto-currencies like BitCoin have made it much easier for high-tech miscreants to collect their ill-gotten gains** without fear of being tracked down through the payment system by law enforcement. In short, ransomware has become a highly sophisticated billion-dollar software industry, full of shady entrepreneurs employing armies of skilled coders on the back end and not-so-smart breaking-and-entering artists up front. Some ransomware gangs even offer tech support via email or chat to help you figure out how to pay your BitCoin ransom online. During Prohibition, organized criminal mobs in the US grew rapidly and got rich selling illegal liquor, despite the efforts of the FBI’s Elliot Ness and his Untouchables. The pursuit of staggering profits made the crooks much better organized, innovative and effective; despite a few high-profile successes, law enforcement simply couldn’t keep up. Similarly, ransomware developers and distributors are maintaining their lead in this new arms race against the IT security industry. Every time your security vendor builds a new wall, ransomware makers find a way to tunnel underneath it. You may not get hit by a ransomware attack next week or next month, but it is increasingly inevitable that you will get hit. There’s just too much easy money in the business, and too many online thieves eager to scoop it up. ## How to Prevent Ransomware As dire as that sounds, you _can_ build a solid defense against the ransomware crime wave, starting with the foundation of a rigorous [data protection](https://www.acronis.com/en-us/) regimen with both local and [cloud-based backups](https://www.acronis.com/en-us/cloud/backup/). For a look at how a Toronto-area car dealership managed to successfully evade a ransomware attack, download this case study, “[Ready Honda Recovers from Ransomware with Acronis](https://www.acronis.com/en-us/resource-center/resource/151/?sfdc_campaignID=70150000000qkNR&source=Website-Social&source_detail=Blog) .” In future editions of this series, we’ll look in more detail at the ransomware distribution model, describe how some [managed service providers](https://www.acronis.com/en-us/blog/posts/build-your-own-brand-acronis-white-label-software/) are successfully defending their customers against ransomware attacks, and show how you can build your own defense-in-depth [approach to defeating ransomware](https://www.acronis.com/en-us/lp/personal/how-to-prevent-ransomware/). Stay tuned! [Cybersecurity](https://www.acronis.com/en/blog/tags/cybersecurity/) [Cyber protection](https://www.acronis.com/en/blog/tags/cyber-protection/) ## Written by ![Image 3: James Slaby](https://staticfiles.acronis.com/images/content/36117e925e5b5e501a197e22a2959987.png) James Slaby [Previous post](https://www.acronis.com/en/blog/posts/what-does-data-protection-have-do-motorsport/) [What Does Data Protection Have to Do with Motorsport?](https://www.acronis.com/en/blog/posts/what-does-data-protection-have-do-motorsport/) [Next post](https://www.acronis.com/en/blog/posts/acronis-backup-12-closer-look-amazon-ec2-backup/) [Acronis Backup 12 Closer Look – Amazon EC2 Backup](https://www.acronis.com/en/blog/posts/acronis-backup-12-closer-look-amazon-ec2-backup/) About Acronis Acronis is a leader in AI-native cyber protection, unifying data protection, cybersecurity, IT operations and hybrid infrastructure to deliver business continuity, security and compliance with less cost and complexity. More than 21,000 service providers trust Acronis to protect over 750,000 businesses in 150 countries. Acronis is headquartered in Schaffhausen, Switzerland. [Add as a preferred source on Google](https://google.com/preferences/source?q=acronis.com) ## Related stories Want to learn more? Read the latest stories featuring this solution on our blog. [Acronis Blog](https://www.acronis.com/en/blog/) ![Image 4: stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://staticfiles.acronis.com/images/blog-card/9600f3eea83b8f4e168ea6c1409c8c26.png) [stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://www.acronis.com/en/blog/posts/stc-bahrain-and-acronis-partner-to-bring-endpoint-security-to-businesses/) We are proud to announce a strategic partnership with stc Bahrain, expanding access to advanced cybersecurity services for businesses across Bahrain. **October 26, 2026**3 min read ![Image 5: Introducing New Acronis CEO: Prakash Panjwani](https://staticfiles.acronis.com/images/blog-card/30cb571f6f1aaa131733e5727a4a250c.png) [Introducing New Acronis CEO: Prakash Panjwani](https://www.acronis.com/en/blog/posts/introducing-new-acronis-ceo-prakash-panjwani/) We are pleased to announce the appointment of our new Chief Executive Officer, Prakash Panjwani. A veteran cybersecurity CEO, Panjwani previously served as CEO of WatchGuard Technologies and SafeNet. **October 15, 2026**2 min read ![Image 6: Acronis expands MDR toward broader workspace protection](https://staticfiles.acronis.com/images/blog-card/18e90e89f5ec4ef0901f19008d4ccbf2.png) [Acronis expands MDR toward broader workspace protection](https://www.acronis.com/en/blog/posts/acronis-expands-mdr-toward-broader-workspace-protection/) Acronis is expanding the MDR service with capabilities that make this expertise easier to deliver and help partners address more risks. The developments build on a broader commitment to managed security: helping service providers protect the connected workspace while giving customers access to the expertise needed to investigate threats, respond effectively and maintain business continuity. **October 13, 2026**6 min read