A dangerous new ransomware campaign targeting businesses across India is spreading through something as simple as an email with the subject line “Sorry.” Cybercrime investigators have warned that opening the seemingly harmless email can give hackers access to an organization’s computer systems within seconds, allowing them to lock critical data and demand ransom payments in Bitcoin.
According to officials, the campaign has already compromised nearly 44,000 IP addresses and control panels over the past three days, making it one of the largest ransomware threats reported in recent times.
A Single Click Can Lock Entire Company Systems
Investigators say the attackers are exploiting human curiosity by sending emails with the subject line “Sorry” from what appears to be a legitimate email address. Employees who open the email or download its attachment may unknowingly install ransomware on their organization’s systems.
Once activated, the malware quickly compromises the computer, blocks access to the system’s control panel, or allows hackers to gain unauthorized access to the company’s network.
Almost immediately, victims are presented with a message demanding payment in Bitcoin in exchange for restoring access to their files.
Cyber experts warn that many organizations store highly sensitive information—including customer databases, financial records, payment details and payroll data—on these systems, making ransomware attacks particularly damaging.
44,000 Systems Reportedly Affected
According to official sources, the National Cybercrime Reporting Portal has received complaints over the past three days involving nearly 44,000 compromised IP addresses and control panels.
Officials believe the attackers are primarily targeting:
Large companies
Financial institutions
Business establishments
Organizations using official corporate email IDs
A senior cybercrime official said the attackers deliberately target employees handling official email accounts because a single mistake can provide access to an entire corporate network.
How the Attack Works
Officials explained that the attack follows a simple but highly effective method:
An employee receives an email with the subject “Sorry” from what appears to be a genuine sender.
The employee opens the email or downloads the attached file.
The malicious attachment silently installs ransomware.
Hackers gain control of the organization’s systems.
Company files are encrypted and access is blocked.
A ransom note appears demanding payment in Bitcoin.
The malware spreads rapidly across connected systems, encrypting files, locking servers and bringing business operations to a standstill.
Businesses Face Major Disruptions
Officials warned that ransomware attacks can severely disrupt business operations. Companies may lose access to:
Customer databases
Financial records
Payroll systems
Internal business files
Critical operational data
In some cases, organizations remain locked out of their systems for weeks while attempting to recover.
Cybersecurity experts also cautioned that paying the ransom does not guarantee data recovery. Victims may receive faulty decryption keys or even become targets for future attacks once hackers know they are willing to pay.
Authorities Issue Advisory
In response to the growing threat, authorities have issued an advisory urging organizations to remain extremely cautious when handling unexpected emails.
Avoid opening suspicious emails or attachments.
Verify unexpected messages through another communication channel before responding.
Keep operating systems and antivirus software updated.
Enable multi-factor authentication (MFA) wherever possible.
Maintain secure offline backups of important data.
Conduct regular employee training to help staff identify phishing emails and other cyber threats.
Stay Alert Against Phishing Emails
Businesses have been advised to:
Cybercrime officials stressed that ransomware attacks increasingly rely on social engineering rather than technical vulnerabilities. A single careless click can compromise an entire organization’s digital infrastructure.
With thousands of systems reportedly affected in just three days, businesses are being urged to exercise extreme caution, verify suspicious emails before opening them, and strengthen their cybersecurity practices to reduce the risk of falling victim to ransomware attacks.
Also Read: Massive Hack Hits Tata Electronics, iPhone 18 Pro Files Leaked https://www.vibesofindia.com/apple-supplier-tata-electronics-630gb-data-breach-iphone-18-pro-leak/
