Living with Ransomware - The New Normal in Cyber Security
summary
Ransomware evolves into a persistent business model: actors sell ransomware-as-a-service, pivot from encryption to data-leak extortion, and sometimes dwell in networks for years — one freight client has access dating to 2020 and attackers use MegaSync data exfiltration before encrypting. Recent families ship Linux/ESX tooling to enumerate VMs and kill processes, i.e. ESX/VMware targeting. Detection relies on EDR, behavioral rules derived from observed commands, regular snapshots and logs, and insurers report payouts up to $12M/year.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 2:12Ransomware
- 4:26Motivation
- 9:06Real World Examples
- 13:36Best Practices
- 17:09Cyber Insurance
- 19:15Communication Strategies
- 22:59Questions Answers
- 30:56Conclusion
related talks
40mRansomware Threat Landscape
37mThe 2024 Ransomware Threat Landscape: What's Fueling the Epidemic?
27mFrom RATs to Extorting Multibillion Companies: The Evolution of a Modern Ransomware Group
37mRansomware Resilience: Holistic Defense for SOC Leaders
40mRansomware: New Recipe For An Old Dish
32mProspecting Ransomware Tech
52mRansomware 101: Get Smart Understanding Real Attacks
40mA Review of the Ransomware Threat Landscape