{"id":727,"date":"2021-05-05T15:22:27","date_gmt":"2021-05-05T20:22:27","guid":{"rendered":"https:\/\/cmitsolutions.com\/boston-ma-1089\/?p=727"},"modified":"2023-03-23T23:23:04","modified_gmt":"2023-03-24T04:23:04","slug":"cyber-extortion-is-the-new-ransomware-2","status":"publish","type":"post","link":"https:\/\/cmitsolutions.com\/boston-ma-1089\/blog\/cyber-extortion-is-the-new-ransomware-2\/","title":{"rendered":"Cyber Extortion is the New Ransomware"},"content":{"rendered":"

Cyber Extortion is the New Ransomware<\/strong><\/h1>\n

The last time we blogged about ransomware<\/span><\/a> we talked about how it works, the top three ways it occurs, and how it infiltrates a system from start to finish. In its most basic form, a ransomware attack is when hackers encrypt your files and extort you to pay their ransom in order to regain access to your data. Unfortunately, ransomware continues to be a major issue for companies of all sizes. And it is getting worse. Attacks have been on the rise in 2021.<\/p>\n

\"\"<\/p>\n

Hackers are increasingly changing their attack strategy and evolving their tactics. The latest ransomware strategy takes privacy infringement even farther. Besides holding their victims\u2019 files for ransom, they are also starting to inform their victims that they will release the data captured from their attack. In other words, hackers are now looking to exploit the data for more than just a one-time payment and are developing alternate revenue streams.<\/p>\n

What does this mean? No longer is a victim safe from ransomware simply because they backed up their data\u2014the victim can then restore their data and not have to pay the hacker\u2019s ransom to get their files back. Now, the hacker demands ransom in order to NOT release your data to the public, so even if you have good backups of your data, the hackers may still be able to extort you or your company.<\/p>\n

\"\"<\/p>\n

RECENT RANSOMWARE EXTORTION INCIDENTS<\/strong><\/h3>\n

Data extortion attempts now occur in 77 percent of all ransomware attacks, according to Coveware\u2019s Q1 2021 Quarterly Ransomware Report<\/span><\/a>. This is an increase in 10 percent from Q4 2020. Examples of recent extortion incidents include:<\/p>\n

Accellion\u2019s FTA<\/a><\/span> was exploited by Clop ransomware in late December of 2020. Two zero day flaws were exposed, allowing for remote code execution against unpatched systems. Other examples of recent ransomware incidents include:<\/p>\n

Computer Acer<\/span><\/a> suffered a cyber extortion attack and was told to pay $50 million in ransom\u2014the largest known ransom to date. REvil is believed to be responsible for this attack.\u00a0 The breach was posted on their website and they leaked some of the stolen information.<\/p>\n

Sierra Wireless<\/span><\/a> also suffered a ransomware attack earlier this year. As a producer of IoT devices<\/span><\/a>, the attack forced them to halt their manufacturing as its internal systems took the brunt of the attack.<\/p>\n

HOW TO PROTECT AGAINST RANSOMWARE<\/strong><\/h3>\n

Malware comes in all shapes and sizes. It doesn\u2019t technically become ransomware until the attacker demands a ransom. Cyber attacks have all sorts of motivations. Not all are based on extorting the victim. Here are the most helpful tips for protecting yourself and your company:<\/p>\n

\"\"EDUCATION.<\/strong>\u00a0<\/span> We\u2019ve talked about this before, but cybersecurity awareness training for yourself and your staff about phishing emails<\/span><\/a>, good security practices in general and other compliance topics will help protect you from ransomware and other security issues. Lack of education leads to weak access points.<\/p>\n

 <\/p>\n

\"\"LIMIT ADMINISTRATIVE ACCESS<\/strong>.\u00a0<\/span> The principle of least privilege is an axiom for all security professionals. Most users do not need administrative or privileged access (even though they think they do). Hackers love to leverage accounts with admin privileges or find ways to elevate privileges. Limiting admin privileges limits the impacts of ransomware, the impact of malware and other security breaches.<\/p>\n

 <\/p>\n

 <\/p>\n

\"\"HARDEN YOUR INFRASTRUCTURE.<\/strong><\/span> Make sure you have good backups. Backups are still key to protecting your data from ransomware, malware and other types of data loss. Disable inbound RDP (Remote Desktop Protocol) to prevent access from the outside-in. Ransomware is fundamentally a human problem, brought about by how poorly certain technologies are implemented and used.<\/p>\n

<\/h3>\n

THE RANSOMWARE TASK FORCE<\/strong><\/h3>\n

A new industry task force lead by the U.S. Department of Justice and some of the world\u2019s top tech firms and leading authorities prepares to tackle the threat of ransomware with a comprehensive framework for action in the 81-page report, Combating Ransomware<\/span><\/a>. The report declares \u201cransomware is no longer just a financial crime; it is an urgent national security risk that threatens schools, hospitals, businesses, and governments across the globe.\u201d<\/p>\n

The first of its kind to address ransomware on a worldwide level, the coalition seeks a collaborative effort to locate, apprehend, and penalize\u00a0 hackers. The Ransomware Task Force Framework is organized around four strategic goals: deter ransomware attacks; disrupt the ransomware business model; help organizations prepare; and respond to ransomware attacks more effectively.<\/p>\n

WORK YOUR DEFENSES<\/strong><\/h3>\n

The new ransomware trend is moving away from straight encryption and more towards the theft of data with the threat to release. Hackers are constantly trying to update their methods. Unfortunately, no backup is going to save you from a guy threatening to release your private customer data to the internet. This is why it is critical to make it continuously harder for hackers to infiltrate your defenses. Contact your trusted CMIT advisor for help in educating your organization and protecting your infrastructure. No one wants to find out just how much their private information is worth.<\/p>\n

Written by: Chris Zambuto<\/span><\/a> | Chief Information Security Officer @<\/a><\/span>CMITBostonCambridge<\/span><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Cyber Extortion is the New Ransomware The last time we blogged about…<\/p>\n","protected":false},"author":259,"featured_media":728,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[28],"tags":[],"class_list":["post-727","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity-blog"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t