Re:80% of orgs that paid the ransom were hit again
by beermonster on Saturday June 19, 2021 @03:57AM
(#27558692)
> Most of these start as phishes to lower level employees.
They used to (and probably still) do this. But more recently these folk are paying access brokers. A bit like bank robbers teaming up with criminal locksmiths.
> It makes sense to me that’ll happen again and I’m not sure I can say the solution is better backups.
You'll ideally need:
- Better security awareness training to cover human weakness such as spotting dodgy email and what to do if you click a link
- Patch vulnerabilities quickly as this will reduce risk considerably
- Company wide tested and sufficient backup strategy (most companies fail on this) to protect key identified data assets
- Regularly pen-test both your internal and external environments
Obviously it doesn't stop there, but those are key.
They used to (and probably still) do this. But more recently these folk are paying access brokers. A bit like bank robbers teaming up with criminal locksmiths.
> It makes sense to me that’ll happen again and I’m not sure I can say the solution is better backups.
You'll ideally need:
- Better security awareness training to cover human weakness such as spotting dodgy email and what to do if you click a link
- Patch vulnerabilities quickly as this will reduce risk considerably
- Company wide tested and sufficient backup strategy (most companies fail on this) to protect key identified data assets
- Regularly pen-test both your internal and external environments
Obviously it doesn't stop there, but those are key.