enterprise security: ransomware in enterprise and corporate entities

15

Upload: quick-heal-technologies-pvt-ltd

Post on 06-Aug-2015

170 views

Category:

Software

0 download

Report

Download

Tags:

Embed Size (px):

TRANSCRIPT

Page 1: Enterprise security: ransomware in enterprise and corporate entities

Page 2: Enterprise security: ransomware in enterprise and corporate entities

Page 3: Enterprise security: ransomware in enterprise and corporate entities

Digital extortion

• Encryption Encrypts files with a password, stopping from opening them

• Lock screen uses a full-screen image or webpage to stop from accessing anything on computer

• MBR (Master Boot Record)

What is Ransomware?

Page 4: Enterprise security: ransomware in enterprise and corporate entities

• Cryptorbit aka Critroni aka CTB-Locker

• Cryptolocker

• CryptoWall aka Crowti

• ZedoPoo

• TorrentLocker aka Teerac

• TeslaCrypt

Types of Ransomware

Page 5: Enterprise security: ransomware in enterprise and corporate entities

Types of Ransomware…contd

Page 6: Enterprise security: ransomware in enterprise and corporate entities

What do the numbers tell us…

0

10000

20000

30000

40000

50000

60000

70000

80000

Oct' 2014 Nov' 2014 Dec' 2014 Jan' 2015 Feb' 2015 Mar' 2015

Ransomware Detection Statistics – Quick Heal

Page 7: Enterprise security: ransomware in enterprise and corporate entities

• Email attachments

• Part of another malware's payload

• Delivered by an exploit kit

• Using phishing links

• Through Vulnerabilities in Applications/plug-ins (like Adobe, Flash Player)

Infection Vectors

Page 8: Enterprise security: ransomware in enterprise and corporate entities

Office files PDF files Database files

Images & Drawings Games files

Targeted Files

Page 9: Enterprise security: ransomware in enterprise and corporate entities

SMSs or phone calls

to premium-rate

numbers

Prepaid electronic

payment – Ukash,

MoneyPack, PayPal

My Cash Cards

Bitcoins – virtual

currency which makes

it difficult to trace the

actual recipient of the

money

Payment Mechanisms

Page 10: Enterprise security: ransomware in enterprise and corporate entities

What are we doing about it?

Signatures Behavior Detection

System (BDS) New Tool

Page 11: Enterprise security: ransomware in enterprise and corporate entities

Preventive Steps

Page 12: Enterprise security: ransomware in enterprise and corporate entities

Applying important software updates and patches

Ensure that Windows Update is enabled to automatically download and apply regular security updates. Also ensure that your system has the latest Windows security patches installed. Also apply updates for important software which is regularly targeted, such as:

• Microsoft Office

• Java

• Adobe Acrobat Reader

• Web browsers like Internet Explorer, Chrome, Firefox, Opera etc.

• Adobe Flash Player

Page 13: Enterprise security: ransomware in enterprise and corporate entities

Regular backup of important data

It is very important to understand the need for data backup policies for all your important data. It is highly recommended that you periodically backup your important data using the right combination of ONLINE and OFFLINE backups. Do not keep offline backups connected to your system as this data could be encrypted in case of an infection.

Page 14: Enterprise security: ransomware in enterprise and corporate entities

Follow best security practices

1. Do not open and execute attachments received from unknown senders. Cybercriminals use ‘Social Engineering’ techniques to allure users to open attachments or to click on links containing malware.

2. Keep strong passwords for login accounts and network

shares.

3. Avoid downloading software from untrusted P2P or torrent sites. At times, they are Trojanized with malicious software.

• Do not download cracked software as they could propagate the added risk of opening a backdoor entry for malware into your system.

4. Ensure staff are educated in good computing practices

Page 15: Enterprise security: ransomware in enterprise and corporate entities

Thank You!

Ransomware - asecuritysite.com · Types •Locker Ransomware. Locks the computer. •Crypto Ransomware. Requires decryption key. •Master Boot Record Ransomware. Attack MBR so that

Properly Defining Enterprise-wide Entities: The Critical Step

MalwareBytes - Ransomware

Ransomware and tips to prevent ransomware attacks

Ransomware- success stories Triangle InfoSeCon · Ransomware Ransomware WannaCry,Petya,CryptoLocker,and TeslaCrypt are some of the more notable examples of such ransomware. In general,

An Enterprise Guide to Preventing Ransomware Attacks

Center for Community Based Enterprise Potential Partners Guide to the Center for Community Based Enterprise, Inc. (C2BE) mission, vision, strategy, entities

CTERA Minimizing the threat of Ransomware with enterprise file services

Malwarebytes Anti-Ransomware Administrator Guide · Malwarebytes Anti-Ransomware Administrator Guide 1 What is Ransomware? In the simplest terms, the name ransomware says it all

A BEGINNER’S GUIDE TO RANSOMWARE · A Beginner’s Guide to Ransomware eBook A Beginner’s Guide to Ransomware eBook unitrends.com 1. CNBC 2. CB Insights 4. North American Enterprise

Ransomware: Wannacry

Ransomware: Modern Day PiratesRansomware • What is ransomware • History of ransomware • Actors and their motivations • Anatomy of a ransomware attack • Cost of a ransomware

New Enterprise Ransomware - Sri Lankan Case studies · 2020. 9. 9. · Case 01 Year : 2019 Ransomware: GandCrab Network : Critical network segment Initial Access : RDP brute forcing

Workshop - Social & Cooperative Enterprise · Context/Presentation • Forms of Social Enterprise • Not-for-profit community organisations • Charitable trading entities • Community

How to Close Security Gaps to Stop Ransomware and Other ...€¦ · Defending an enterprise against ransomware and other cyber threats gets more difficult with every passing day

RANSOMWARE PROTECTION€¦ · RANSOMWARE PROTECTION UIDE . ... Exploitation Exploit Mitigations Application Behavior Payload Execution ... PREVENTION AGAINST RANSOMWARE

Understanding Ransomware: Impact, Evolution and Defensive ...€¦ · 14/07/2014 · 3 Evolution of Ransomware 3.1 Historic Examples of Ransomware Ransomware trojans appeared as

CROWDSTRIKE // WHITE PAPER RANSOMWARE A GROWING …€¦ · CROWDSTRIKE // WHITE PAPER RANSOMWARE A GROWING ENTERPRISE THREAT ... the sheer volume of ransomware variants released

An Enterprise Guide to Preventing Ransomware Attacks · PDF fileEnterprise Guide to Preventing Ransomware Attacks ... Case Study - Tech ... AN ENTERPRISE GUIDE TO PREVENTING RANSOMWARE

RANSOMWARE A GROWING ENTERPRISE THREAT€¦ · A Brief History of Ransomware Following the evolution of ransomware, from a petty crime to a major economic windfall for global criminal

Safeguard your enterprise against ransomware

Minimizing the threat of Ransomware with enterprise file services

Comparative Efficiency Assessment of Enterprise Security ... · PDF fileComparative Efficiency Assessment of Enterprise Security Suites against ... Crypto-ransomware attacking shared

Ransomware infographicITU - itu.int · ransomware detections were flagged as crypto-ransomware. a 27% increase since it was discovered. A ransomware variant seen in Russia that zipped

What You Need to KNoW about StoppiNg RaNSomWaRe · 2018-06-26 · the damage of a potential ransomware attack. BesT pRACTICes foR pRoTeCTIng THe enTeRpRIse AgAInsT RAnsomwARe To avoid

Easy way to uninstall PadCrypt ransomware: Remove PadCrypt ransomware

THE RISE OF ENTERPRISE RANSOMWARE

Thermostat Ransomware

W Ransomware Prevention Is Possible - Cylance Inc. · Ransomware Prevention Is Possible | 2. Anatomy of an Enterprise Attack ... In years past, expert malware authors would package

Enterprise Without Entities - Michigan Law Reviewmichiganlawreview.org/wp-content/uploads/2017/11/116MichLRev247... · Andrew Verstein,Enterprise Without Entities, 116 Mich.L. Rev.247

Ransomware Characteristics

CSIO: Ransomware

THE RISE OF ENTERPRISE - Macomp.com€¦ · safeguard against these types of attacks? This paper examines the enterprise ransomware landscape, outlines the key threats, and highlights

Defend Your Data from Ransomware Attacksdiscover.zyxel.com/rs/471-TTL-126/images/Ransomware...Defend Your Data from Ransomware Attacks The Threat of Ransomware The WannaCry attack

Enterprise Without Entities