Companies that pay ransom demands to cyber criminals in the hope of restoring their IT systems may be at risk of greater negative publicity than those that refuse.
An initial analysis of data seized by the National Crime Agency (NCA) in the takedown of the LockBit ransomware group suggests that the best way to avoid bad publicity may be to refuse to pay up.
Max Smeets, author of the book Ransom War, was given supervised access to data on LockBit 3.0 seized by the NCA during Operation Chronos, which took down the LockBit ransomware operation, and examined leaked data from LockBit 4.0.
Smeets compared press reporting of 100 companies that paid ransomware with reporting on 100 companies that refused to pay.
“It turns out that you are more likely to have a story written about you if you have paid than if you have not paid,” he said in an interview with Computer Weekly.
Smeets’ conclusions fly in the face of claims by criminal ransomware gangs that companies that pay up can avoid bad publicity. He calls it the Streisand effect, whereby in paying a ransom to avoid publicity, companies end up attracting the very publicity they are trying to avoid.
You are more likely to have a story written about you if you have paid [a ransom] than if you have not paid Max Smeets, ransomware expert
Law enforcement has long argued that companies should not pay ransom fees because it supports the ransomware ecosystem and there is no guarantee that they will get their data back.
“What the data also suggests is that you also shouldn’t pay if you are afraid of public exposure,” said Smeets, speaking to Computer Weekly at the Black Hat security conference in London.
The art of the bad deal
Smeets’ analysis also revealed just how ill-prepared many organisations were when negotiating ransomware payments with LockBit’s criminal affiliates.
Some companies told crime gangs upfront that they were desperate to get their data back as they had no backups, putting them instantly on the back foot in negotiations.
Others tried unsuccessfully to win sympathy with the hackers by claiming that they couldn’t afford to pay the ransom, or that they served the local community.
Smeets also found that some victims had sent ransomware gangs copies of their insurance documents to show how much they could afford to pay.
Ransomware victims that pay up are more likely to hit the headlines than those that refuse
His findings show that companies need to be better prepared for ransomware negotiations if the worst happens.
“There is a major opportunity, especially for small and medium-sized enterprises, to become better in understanding how to engage with these criminals without making extreme and obvious mistakes,” he said.
LockBit’s criminal affiliates follow a standard playbook for negotiating ransom payments, which typically involves demanding an initial ransom, offering to decrypt two files for free, and threatening to leak data if organisations don’t pay up.
Smeets found that the criminal groups have so many victims that they don’t spend time analysing the data they capture to look for compromising material that could push up the value of a ransom demand – they are more interested in the next victim.
If companies don’t pay up within a few weeks, affiliates may be inclined to assume that their victim’s lack of desperation may mean their ransomware attack did not cause much damage. They may be willing to accept smaller payments in return for an agreement not to publish the hacked data.
The trust paradox
Ransomware groups like LockBit deceive and steal, but somehow have to convince victims that they are trustworthy enough to restore their data in return for a ransomware payment, so reputation matters.
Operation Chronos not only destroyed the infrastructure of LockBit, but also destroyed its reputation, Smeets’ research shows.
In February 2024, the international police operation seized LockBit’s servers, its administrative hub, its public-facing website and its internal communications.
“The NCA not only went after their technical infrastructure, but also tarnished their reputation by disclosing their lies,” he said.
For example, the group said it would ban the affiliates that hit a children’s hospital in Toronto – it didn’t, said Smeets. LockBit also promised to delete victims’ data from its servers if they agreed to pay, but often didn’t.
When criminal gangs attempted to revive LockBit in December 2024, its reputation had been irretrievably damaged.
Before Operation Chronos, between May 2022 and February 2022, 80 affiliates of LockBit 3.0 received ransomware payments.
LockBit 4.0, an attempt to resurrect the ransomware operation after the police take-down, only received eight ransomware payments between December 2024 and April 2025, according to Smeets’ research.
“LockBit is so tarnished that even if it can put up its infrastructure again, it’s a shadow of its former self,” he said.
Operation Chronos could form a blueprint for future ransomware takedowns by destroying not just the infrastructure but also the reputations of ransomware gangs.
Smeets hopes to conduct further research into the relationship between paying ransoms and negative press coverage to test his initial findings.
If you’re not keen on buying a standing desk, check out the Lifesmart 3-in-1 Treadmill. You can wheel the lightweight machine into any room, place the desk attachment across the handrail, and get to working and walking. The desk’s height won’t accommodate everyone—it was lower than I’d like, and I’m 5’4”. But for quick, basic work like answering emails or sitting in on a meeting, it got the job done just fine.
The 3-in-1 Treadmill gets its name from its ability to serve as a walking pad (with the rail down, the speed tops out at 3.7 mph), a treadmill (with the rail up, you can run up to 7.5 mph), and a workstation (with the rail up and desk attachment on).
It’s easy to set up, and transitioning between the walking pad, treadmill, and work modes is quick and simple (you just need to use a small tool to adjust the rail, which is magnetized so it can live on the rail and never get lost in a junk drawer). You can adjust the speed with buttons on the rails or with a Bluetooth remote, and a screen on the front of the machine cycles through your workout metrics. The sleek, modern design means you won’t be embarrassed to have it out in your living space. The only drawback is that it doesn’t have any incline options.
Quietest Pad
Photograph: Kristin Canning
Photograph: Kristin Canning
Flexispot
Auto Incline Walking Treadmill
This walking pad had the most intuitive setup of any on this list (likely thanks to its lack of a companion app, which oftentimes isn’t really necessary). I was able to set it up in minutes, and the remote connected right away, no Bluetooth pairing required. Like many walking pads, this one has a screen at the front that shows you your workout metrics. If you pause the machine to step off, you can pick right back up where you started, building on those metrics until you turn the machine off. One downside: It doesn’t track steps.
The Auto Incline Walking Treadmill offers a great incline range, going up to a level nine, or 12-percent incline. It’s one of the highest incline capabilities I’ve found in my testing. You can walk up to 4 mph on this machine, and you can connect your phone to play music through the speakers. The remote allows you to take on 30-minute, preprogrammed walking workouts, too, where the machine auto-adjusts the speed throughout (though not the incline). Otherwise, you can use it in manual mode and adjust the settings to your liking.
We asked Joshua Hale, general manager of commuter bike specialists Quella, to answer all our questions on how to get your bike ready for winter and keep it running smoothly all year long.
How can cyclists stay visible to drivers without turning into a rolling Christmas tree?
It is not just the quantity of lights that’s important. Placement also makes a huge difference. A bright front and rear light are essential—ideally one steady and one flashing—to help you stand out without dazzling anyone on the road. Reflective details on moving parts like your jacket, ankles, or pedals also catch drivers’ eyes naturally. Good quality lights and reflective accents do a lot more than overloading on LEDs.
Layer clothing with breathability in mind. Start with a moisture-wicking base layer to keep sweat off your skin, add an insulating layer like a fleece or thermal jersey, and finish with a windproof or waterproof shell. You’ll warm up fast once you’re moving, so it’s better to start slightly cool. Zips and vents that can be opened on uphill climbs and closed on descents will come in handy. Other lightweight accessories such as gloves, a buff, and overshoes can also increase your comfort without adding bulk.
How can you adjust your tire size or pressure to ride safely on wet or icy roads?
In winter, opt for wider tires with a grippier tread—28 mm or more, if your bike allows it. The extra width increases contact with the road, giving better stability and traction. Lowering your pressure slightly (by around 10–15 psi) also improves grip on slippery surfaces without feeling sluggish. Avoid slick tires when it’s icy, and check your tires regularly, as wet roads pick up more glass and grit.
What are the easiest and most effective upgrades for commuters?
Mudguards are top of the list. They keep both you and your bike cleaner and drier. Good-quality lights with USB charging make daily use simpler, and winter-specific gloves can save your fingers on frosty mornings. Wider handlebars and padded bar tape also add comfort when the roads get rough. It’s all about small upgrades that make you want to keep riding, even when it’s cold and dark.
Why does your bike need more maintenance in the winter, and what quick maintenance tips can you suggest?
Winter is tough on bikes, with grit, salt, and moisture working their way into every moving part. Regular cleaning is the single best thing you can do, even if it’s just a quick rinse and wipe-down after wet rides. Keep your chain clean and lightly oiled, check brake pads more often, and make sure cables or hydraulic lines aren’t sticking. A few minutes of care each week prevents costly repairs later, and your bike will feel smoother and quieter every ride.
Another year, another update to Sony’s PlayStation Portal. The latest tweak to the hardware considerably expands the roster of games playable on the device—but the end result only highlights how urgently PlayStation needs to re-enter the gaming handheld market for real.
The evolution of PlayStation Portal has been fascinating to watch, mainly to see Sony practically scrambling to keep up with the gadget’s unexpected popularity. Launched November 2023, Portal was intended as a mere accessory for PlayStation 5. It had no native processing abilities, simply using Sony’s Remote Play technology to stream whatever happened on players’ personal PS5 to the portable’s screen.
Although it could technically be used anywhere with a strong Wi-Fi signal, difficulties connecting to public networks and high speed requirements to even launch a stream meant the Portal was effectively only suitable for in-home use, to free up the main TV or play in another room.
Somehow, it still took off, with Sony Interactive Entertainment CEO Hideaki Nishino saying in 2024 that the Portal had been a “huge success.” The same year, Sony made it easier to connect to public Wi-Fi and added actual cloud gaming support to Portal, with a selection of games on offer to players subscribing to PlayStation Plus Premium. The initial offering included “over 120 PS5 games from the PS Plus Game Catalog,” though the curated library was subject to change. It could have been a big shift in how players approached hardware and software alike, but, in practice, didn’t really deliver.
Even so, another year on and the Portal’s success seems unstoppable. Sony’s Takuro Fushimi recently told TechRadar that “the community’s response has been overwhelming” and that Portal is now the “most widely used device for PS5 Remote Play.” It’s little surprise, then, that Sony keeps trying to hammer it into something that looks, if you squint, like the standalone gaming handheld it was never intended to be, but that players so desperately want.
Clearer Skies?
Enter the newest update to PlayStation Portal. It takes Cloud Streaming out of its beta phase, expanding the streamable library from only those titles included in the PS Plus selection to many games digitally owned by players. Until now, if you didn’t have a game installed locally on your PS5 or it wasn’t included in that cloud catalog, too bad, no Portal play for you. Going forwards, you’ll be able to cloud stream many titles if they’re tied to your PlayStation account through purchase on the PlayStation Store—although you will still need to be subscribed at the PS Plus Premium tier to use the feature, which will set you back $160 for a full year.
The assortment available is already vast—more than 3,000 games at time of writing. On the face of it, this should be a transformative development for not just the Portal, but PlayStation as a gaming ecosystem. It potentially extends availability of titles you own to wherever you want to play them, and could even help alleviate data storage woes. Although the PS5’s internal drives can be expanded, SSDs can be pricey at higher capacities, and players with large digital collections often can’t install everything they own. Being able to stream games tied to your account without eating up drive space could be a great workaround.
The update also aims to improve the broader player experience on Portal. It finally adds the ability to make in-game purchases when cloud streaming (potentially useful if you want to buy some DLC or virtual currency), and allows players to receive game invites to multiplayer sessions when playing a game via the cloud. Previously, these features were only enabled for Remote Play gaming on Portal, since they were effectively being done through the PS5 and mirrored on the Portal’s screen. Accessibility features have also been improved, adding a screen reader tool and adjustable text sizes.