{
  "id": 363402,
  "title": "Ransomware gangs skip the CEO, head straight for the 40-something IT manager",
  "url": "https://urgent.news/2026/08/09/ransomware-gangs-skip-the-ceo-head-straight-for-the-40-something-it",
  "topic": "science",
  "section": "Science",
  "published": "2026-08-09T09:33:00.000Z",
  "source": {
    "name": "The Register",
    "slug": "the-register",
    "url": "https://www.theregister.com/security/2026/08/09/ransomware-gangs-skip-the-ceo-head-straight-for-the-40-something-it-manager/5284499"
  },
  "original_language": "en",
  "account": "Ransomware attackers are increasingly targeting 40-something IT managers rather than company CEOs, according to a recent report by Zscaler. The data reveals that nearly two-thirds of victims targeted in a single ransomware campaign held manager-level titles or above, with the average victim being a 46-year-old Gen Xer. These cybercriminals conduct extensive research to map reporting lines and identify employees most likely to influence a company's response to a ransom demand. Instead of randomly targeting executives, attackers focus on managers with the authority or influence to expedite payment decisions, such as those involved in invoicing, payment approvals, budgets, supplier contracts, customer accounts, HR records, or other sensitive business processes. This shift reflects a trend towards \"business privilege\" rather than technical privilege, as attackers seek employees with comprehensive access to business operations. The Gen X demographic is particularly attractive to attackers, as many individuals in this age group have reached established management positions, providing them with valuable systems, sensitive information, and decision-making authority. Furthermore, the report highlights that more than a dozen organizations experienced multiple employee compromises during the campaign, indicating that attackers do not stop at a single point of entry and work their way through various business functions to maximize their chances of accessing valuable data and personnel. Overall, the ransomware landscape has evolved from indiscriminate attacks to highly targeted extortion campaigns, with attackers already possessing detailed knowledge of their victims' organizational structures and decision-making processes by the time the ransom note is sent.",
  "summary": "Gen Xers who feel triggered by this should remember to unplug the network cable and call the cops",
  "key_points": [
    "Ransomware attackers target IT managers, not CEOs",
    "66% of victims in a campaign held manager-level titles",
    "Attackers focus on managers with business influence"
  ],
  "editors_take": "This shift in ransomware tactics means attackers can expedite payment decisions by targeting managers with authority, rather than solely relying on technical privileges, giving them greater control over extortion outcomes.",
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "The Register Science",
        "title": "Ransomware gangs skip the CEO, head straight for the 40-something IT manager",
        "url": "https://urgent.news/2026/08/09/ransomware-gangs-skip-the-ceo-head-straight-for-the-40-something-it-364730",
        "published": "2026-08-09T09:33:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}