Ransomware Physical Treats: FBI Warns US Businesses of Violence-as-a-Service

• Ransomware Physical Treats: FBI Warns US Businesses of Violence-as-a-Service

• FBI Report:- Ransomware Gangs Now Threaten Employees at Home in the US

• Violence as a Service: how Hackers Pay people to Threaten and Attack Victims

• US Cybercrime Hits Record High: $20.8 Billion Lost to Ransomware in 2025

• Crypto Kidnapping & Ransomware: Why Hackers are targeting you in Real Life

 

Threats of physical violence are becoming more common in cybercrime.

  

When Tim Beasley opened his front door a few years ago, he found a tiny box on the step."What the heck is this?" I thought. When I opened the box, I exclaimed, "Oh!" and threw it away right away.
A threatening message that threatened to use physical force if he didn't back off was found inside the box.

At the time, Beasley, who works for the US security company Semperis, was negotiating a ransom on behalf of a US government agency that had been the target of a cyberattack.
The box that was delivered to his US residence was a warning from the ransomware outfit that he had been contacting.

 

Cyberattacks are still on the rise globally. According to new FBI statistics, the number of reported cases in the US alone rose from 288,012 in 2015 to a record high of 1,008,597 last year.
According to the report, US businesses and other organizations suffered a financial loss of $20.8 billion (£15.4 billion) in 2025. This increased from $16.6 billion in 2024.

 
Last year, cyberattacks in the UK also reached all-time highs.

Hackers typically attempt to get access to a company's computer system in order to steal confidential information or seize control and shut down the enterprise. The cybercriminals then demand payment to return the data or return the system to the concerned company.
However, a growing number of cybercriminals are now going so far as to threaten real violence and extort their victims. According to FBI annual figures, the frequency of such violent threats in the US more than doubled last year.

 

According to a different study by Semperis, in up to 40% of ransomware attacks worldwide in 2025, the perpetrators threatened to physically harm employees who refused to pay a ransom demand.
"It's always been here in the background, but it's becoming more of a reality, slowly inching its way up," says Beasley. The situation was reportedly much more pervasive in the US, where businesses encountered violent threats 46% of the time.

 

After gaining access to employees' personal information, including their home locations, hackers are threatening them. In one hospital ransom negotiation that Zac Warren of the US security firm Tanium worked on, it was the situation.

 

 

“The chief security advisor for Europe and the Middle East said, "We started getting reports that employees within the hospital were getting phone calls." "So they were calling into the hospital… and asking for nurses by their name, and then talking to them and telling them that they knew where they lived."In order to give them the impression that they were being watched, they provided them with social security numbers and street addresses. The professionals were being intimidated to a very high degree since they had all this information.”

 

Even though there isn't always a direct threat of bodily injury, it can nevertheless be fatal. Attackers have occasionally been able to take over factory machines, for instance, and show off their dominance by turning robots and conveyor belts on and off—actions that may easily result in harm or even death.
State-sponsored ransomware gangs are common, and Russia, China, Iran, and occasionally North Korea have all made violent threats.
However, the majority of physical threats typically originate from organizations that are solely driven by financial gain. These hackers are frequently rather young. One such group's age range, according to the FBI's profile, was primarily between 17 and 25.

 

These cybercriminals are often accused of paying others to threaten or actually commit acts of violence. According to Beasley, "the hackers themselves frequently don't want to get their hands dirty." Rather, they will advertise on social media or message boards to "do some recruiting, offer some cash and then people get hit or they get stalked."
The shadowy realm of crypto currency investing is home to some of the most serious threats of violence, including actual physical attacks. For instance, the father of a bit-coin millionaire who had been abducted and held for ransom in a Paris suburb was saved by French police in May of last year.

 

According to one source, there were over eighteen of these occurrences in Europe last year, including the UK. According to the survey, there has been a "dramatic increase" in cybercrime involving physical assaults.
As part of its broader attempts to apprehend the perpetrators of all "violence as a service"—attacks carried out for a fee—Europol, the European Union's law enforcement agency, looks into such crimes.

 

Last summer, the FBI in the US released a warning about a network of cyber criminals known as "In Real Life Com" that posed a greater threat of violence.
According to Adam Meyers, senior vice president for counter adversary operations at cybersecurity software company CrowdStrike, "If you are looking for something bad to happen to somebody you can find somebody that's willing to take that action for you within 'The Com'." These criminals are reportedly becoming more aggressive and willing to offer violence as a service.

 

"That might involve hurling bricks through a window, igniting something, shooting someone, or kidnapping someone. People with lower levels of technical proficiency will likely be more drawn to violence-as-a-service as it's frequently their only contribution to the gathering.”

 

Meyers continues, "In the cryptocurrency cases, the victims have likely attracted attention by being careless about what they reveal on social media, boasting about their success."People who are interested in cryptocurrencies tend to talk about it in a different way than others who may own gold, he claims. "They are attempting to gain attention and followers by discussing bitcoin trading and how much money they have gained. You are calling attention to yourself when you do that.

 

According to Beasley, cybercrime-related threats of violence will probably only increase "because people keep paying" because "they don't want their kids getting kidnapped."
He also states: "It does make you want to look behind your back."