According to a survey conducted by Sophos, 2020 was a tough year for education, with the sector experiencing the highest level of ransomware attacks of all industries. Ransomware attacks have been on the top list of dangerous threats to information systems for over a decade. The threats of ransomware attack do not seem to go away or rather slow down BUT seems to get more complicated.
Are the current mitigation techniques well designed to prevent the attacks? What are your thoughts?
Dear Atiff Abdalla Mahmoud Arabi,
You may want to overview the following info:
https://www.isaca.org/resources/isaca-journal/issues/2021/volume-5/rise-of-ransomware-attacks-on-the-education-sector-during-the-covid-19-pandemic
https://cybersecurity.att.com/blogs/security-essentials/ransomware-attacks-on-the-perimeter
https://www.sophos.com/en-us/medialibrary/pdfs/whitepaper/sophos-state-of-ransomware-in-education-2021-wp.pdf
https://www.alertlogic.com/resources/industry-reports/ransomware-in-focus/?utm_source=google&utm_medium=cpc&utm_campaign=MT%20-%20Nonbrand%20-%20Ransomware%20-%20US&utm_content=ransomware%20defense%20strategy|558420566778&utm_term=ransomware%20defense%20strategy&_bt=558420566778&_bm=p&_bn=g&gclid=Cj0KCQiAhMOMBhDhARIsAPVml-HmjqSPLqfEaWlDMCd7W-WzXtFHPlSSdC3gXR_ek0ZA5TqB_XsaK2oaAm1REALw_wcB
I think the Ransomeware will be done via Malware. These malwares installed on a computer's vectim scilentlly.
Thus you need to check the downloaded softwares especialy .exe
Because of increase usage of advanced rapid data transmitting frequency been employed now, it make it easier for network and servers to be easily breached and more vulnerable to malwares attacks , the current mitigating ransom wares are not equipped for more advanced hacking ransom ware codes been developed now and deploy for phishing activities
14 tactics to use during a ransomware negotiation
Be polite during negotiations, ask for more time and always request a test file for decryption. Those are a few of the best practices for dealing with a ransomware attack, according to a new analysis of 700 incidents...
https://www.techrepublic.com/article/14-tactics-to-use-during-a-ransomware-negotiation/?ftag=TRE684d531&bhid=26515897512689358169344413145444&mid=13596172&cid=959017973
I believe the ransomware will be delivered using malware. These malwares slowly infiltrate a computer's victim.
Ransomware attacks are often preceded by some type of scam or ploy designed to gain access to account credentials, vulnerable systems and critical networks. With the holidays in mind, CISA and the FBI advise you to watch out for the following threats:
https://www.techrepublic.com/article/us-government-warns-of-increased-ransomware-threats-during-thanksgiving/?ftag=TRE684d531&bhid=26515897512689358169344413145444&mid=13599503&cid=959017973
According to CISA, Ransomware is an ever-evolving form of malware designed to encrypt files on a device, rendering any files and the systems that rely on them unusable in such a situation malicious actors then demand ransom in exchange for the decryption. Keeping information systems safe and secure is more important than ever in all sectors of the economy and at personal.
Very interesting question! I completely agree and support the opinion of dear colleagues Ljubomir Jacić, Doherty Odueko Funmilayo. Thank you!
Particularly, I think researching defense techniques for ransomware is hard work, new techniques emerge quickly. To find a more specific answer: What strategies are you studying?
Yes, indeed APT, zero-day, and brute force attacks are vectors for ransomware
It very true that as technological advancement continues to revolutionise in protecting against cyber attacks, so as the ransomware tools and methologies used. The use of appropriate mitigation techniques and strategies are very much important, but with no training and awareness, the protection isn't that effective. Thus appropriate mitigation techniques, constant training and awareness is the key to protecting the cyberspace.
Dear researchers,
Thank you for sharing such generous information. In addition, your thoughts and contributions have been taken into consideration and are greatly valued.
Warmest regards.
Ransomware attacks on industrial sectors are frequent nowadays. What tools you need in place for effective preparation and detection of these types of cyber threats, and what to do to respond to a ransomware event at your organization...
https://hub.dragos.com/whitepaper-prepare-for-and-respond-to-ransomware-in-operational-technology-environments?utm_campaign=Q222%20-%20Whitepaper%20-%20How%20To%20Prepare%20For%20%26%20Respond%20to%20Ransomware%20In%20OT%20Environments&utm_source=control&utm_medium=recommended%20for%20you%20eblast
Look at ways to protect against ransomware attacks and how to manage such attacks when they happen...
Security hygiene is critical to protect against “human-operated” ransomware, and a holistic view of the entire organisation is required. Constantly educate users on the types of attack being seen, with regular alerts and security “newsletters” to reinforce the education...
https://media.bitpipe.com/io_14x/io_147232/item_1932814/CWE-151122-ezine-pp28.pdf
Yes Indeed. Zero-day attacks and brute force are ever-threatening. Not a question of if but when. Zero trust software, parchment updates, intrusion prevention measures, and continuous monitoring backed by disaster recovery may aid system survival and resilience
A notorious Russian-based hacker group has dumped more than 6GB of internal files from Munster Technological University (MTU) in the south of Ireland on the internet – they were stolen in a cyberattack around a fortnight ago. The files contain vast amounts of staff and student information...
https://www.universityworldnews.com/post.php?story=2023021709443274&utm_source=newsletter&utm_medium=email&utm_campaign=GLNL0727
Yes Indeed, Russia is notorious for disinformation and information warfare against opponents.
The current mitigation techniques for preventing ransomware attacks are generally effective, but the evolving nature of these attacks means that no single approach is foolproof. It's important for organizations to have a multi-layered security strategy that includes both preventive and responsive measures to address the risks posed by ransomware attacks.
Preventive measures include implementing strong access controls, using anti-malware and anti-virus software, patching software and operating systems, and providing regular employee training to help them identify and report suspicious activities. Organizations should also perform regular backups of their critical data and test their ability to restore that data in the event of an attack.
Responsive measures involve having a plan in place to respond to a ransomware attack, such as isolating infected systems, disabling network access, and contacting law enforcement. Organizations should also be prepared to negotiate with attackers or have a plan to pay the ransom if necessary, although this is not recommended as it can encourage further attacks.
However, as you mentioned, the threat of ransomware attacks is becoming more sophisticated and complex. Attackers are now using more advanced techniques, such as "double extortion," where they not only encrypt data but also threaten to release sensitive information if the ransom is not paid. This makes it even more critical for organizations to stay vigilant and up-to-date with the latest threats and mitigation techniques.
In conclusion, while the current mitigation techniques for ransomware attacks are generally effective, they are not foolproof. Organizations need to take a proactive and multi-layered approach to security that includes both preventive and responsive measures, and stay vigilant against evolving threats.
Dear Aduragbemi David Ogundijo , in your detailed contribution, you have written: "However, as you mentioned, the threat of ransomware attacks is becoming more sophisticated and complex..." Who are you addressing to?
Also, be kind to bring the link to resources used, if any. Thanks.
Dear Ljubomir Jacić My response was addressing the original Question by Atiff Abdalla Mahmoud The statements regarding the current mitigation techniques for preventing ransomware attacks and the need for a multi-layered security strategy are widely accepted in the cybersecurity community. Here are some reference links to support the key statements in my submission:
In a report by the Cybersecurity and Infrastructure Security Agency (CISA), they recommend a multi-layered approach to prevent and respond to ransomware attacks. This includes implementing strong access controls, performing regular backups, and having a plan in place to respond to an attack. (Reference: https://www.cisa.gov/sites/default/files/publications/CISA_MS-ISAC_Ransomware%20Guide_S508C.pdf)
The National Institute of Standards and Technology (NIST) also recommends a multi-layered approach to ransomware defense. This includes implementing security controls such as access controls, firewalls, and intrusion detection systems, as well as performing regular backups and having an incident response plan in place. (Reference: https://nvlpubs.nist.gov/nistpubs/specialpublications/nist.sp.800-184.pdf)
Research by Data Protection Experts from Verita Technologies explains that while there is no single solution to prevent ransomware attacks, a multi-layered approach that includes backup and recovery, security awareness training, and endpoint security can significantly reduce the risk of an attack. (Reference: https://threatpost.com/cybersecurity-best-practices-ransomware/176316/)
The use of "double extortion" techniques in ransomware attacks has been widely reported in the media. According to a report by cybersecurity firm Sophos, the use of double extortion in ransomware attacks increased significantly in 2020 and 2021. (Reference: https://news.sophos.com/en-us/2021/04/27/the-state-of-ransomware-2021/)
Overall, the need for a multi-layered approach to ransomware defense, including both preventive and responsive measures, is widely accepted in the cybersecurity community. The evolving nature of ransomware attacks means that organizations need to stay vigilant and up-to-date with the latest threats and mitigation techniques to protect their systems and data.
Refer to : ncsc.gov.uk/guid. Mitigating ransomware attacks can be challenging, one may consider (1) defence-in-depth ( granular layered security); (2) Offline backup; (3) regular backups; (4) patchment updates; (5) zero-trust; (5) IPS; (6) EDR
Ransomware gangs’ harassment of victims is increasing
Ransomware groups are pulling no punches in their attempts to force compromised organizations to pay up. A report released Tuesday by Unit 42, a Palo Alto Networks threat intelligence team, found that attackers are increasingly harassing victims and associated parties to make sure their ransom demands are met...
https://www.techrepublic.com/article/ransomware-gangs-harassment-victims-increasing/
Automated ransomware poses significant threats, but there are measures you can take to protect against them. These attacks are more efficient and effective, but thorough cybersecurity measures can prevent them.
Even automated ransomware attacks still rely on social engineering or phishing more often than not. Consequently, the easiest way to avoid breaches remains the same. In-depth and regular cybersecurity training for all employees can keep users from interacting with phishing messages, stopping automatic propagation before it can occur...
https://gca.isa.org/blog/how-ransomware-gangs-automate-their-attacks
- Badges
- Science topic
- Similar topics
- Social Psychology
- Attitude