{"version":"1.0","type":"rich","provider_name":"RootPwn","provider_url":"https://rootpwn.me","title":"Ransomware Double Extortion: Detecting Pre-Encryption Data Theft","description":"Ransomware actors are now stealing data before encrypting files to enable double extortion, often disguising exfiltration as legitimate admin activity. Defenders must monitor outbound data flows, enforce least‑privilege access, and investigate anomalous file transfers to stop the threat early.","url":"https://rootpwn.me/news/ransomware-double-extortion-detecting-pre-encryption-data-theft","thumbnail_url":"https://rootpwn.me/images/fba1aa47264a48009d5dec4fb903dae7.jpg","thumbnail_width":1600,"thumbnail_height":900}