
Cyberattacks, Data Encryption, Extortion: How Cybercriminals Operate
Ransomware has become a professionalized industry, and this DW film shows why. In spring 2025, Philipp Bosshard's Swiss company gets hit: the entire operation grinds to a halt, 200 jobs are on the line, and the hackers give him twelve days to pay or lose everything. The film cuts between his crisis and the criminals behind attacks like his, following cybersecurity analyst Jon DiMaggio's months-long undercover infiltration of the Lockbit gang, where he befriends and eventually helps unmask the group's leader, known online as LockbitSupp. When Lockbit's own systems are breached in 2025, data journalist Simon Huwiler digs through the leaked files and traces one unusually large ransom payment back to Switzerland. Interviews and case files lay out how these gangs mirror legitimate businesses, with developers, negotiators, and customer-support teams working to deadlines. The result is a compact look at both sides of a ransomware attack, the company deciding whether to pay and the criminals running the extortion like a corporation.