{"id":46359,"date":"2021-12-15T03:04:00","date_gmt":"2021-12-15T08:04:00","guid":{"rendered":"http:\/\/blog.cybercon1.com\/?p=46359"},"modified":"2021-12-15T03:04:00","modified_gmt":"2021-12-15T08:04:00","slug":"winning-the-war-on-ransomware","status":"publish","type":"post","link":"https:\/\/blog.cyberconservices.com\/index.php\/2021\/12\/15\/winning-the-war-on-ransomware\/","title":{"rendered":"Winning the war on ransomware"},"content":{"rendered":"\n

It is not just Ransomware either. The phishing attacks and outright breach of emails for nefarious purposes all need to be pursued and dealt with. <\/p>\n\n\n\n

By\u00a0Mitchell Clark<\/a> – In\u00a0the past 10 years, ransomware<\/strong> has become inescapable. All kinds of institutions have been targeted, from the\u00a0schools children go to<\/a>, to\u00a0fuel<\/a>\u00a0and\u00a0medical infrastructure<\/a>. A\u00a0report from the US Treasury estimates<\/a>\u00a0there were over half a billion dollars in ransomware payouts in the first half of 2021 alone. Law enforcement has struggled to get a handle on the situation, with many groups operating for years with no apparent fear of repercussions.<\/p>\n\n\n\n

This year, federal law enforcement decided to try something new. In April, the Department of Justice\u00a0created the Ransomware<\/strong> and Digital Extortion Task Force<\/a>\u00a0in a move to prioritize the \u201cdisruption, investigation, and prosecution of ransomware<\/strong> and digital extortion activity.\u201d The task force is supposed to help share information between DOJ departments, as well as work with outside and foreign agencies. In the months since, it\u2019s made some impressive prosecutions, but they\u2019re just a sliver of the overall \u2014 and the bigger picture remains maddeningly unclear.<\/p>\n\n\n\n

One of the first publicized wins for the group came in June, when the\u00a0Department of Justice said<\/a>\u00a0the group was handling the case of an individual alleged to be partially responsible for\u00a0the malware suite known as Trickbot<\/a>, which could help expose a system to a ransomware attack. Days after that announcement came an even bigger win:\u00a0the DOJ announced<\/a>\u00a0it had seized back $2.3 million of the $4.4 million ransom paid by oil company Colonial Pipeline, and that the task force had coordinated the efforts. Then, in October,\u00a0its biggest win yet<\/a>\u00a0\u2014 the arrests of a few alleged members of REvil, a hacking group, by European police forces, and the seizure of over $6 million in funds the department says were linked to ransomware<\/strong> payments.<\/p>\n\n\n\n

Still, the sheer volume of attacks means a handful of prosecutions is unlikely to make a difference. Prosecutors need the threat of law enforcement action to scare criminals away from ransomware <\/strong>\u2014 and some experts say the scheme is still too lucrative for criminals to give up. Read On:<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

It is not just Ransomware either. The phishing attacks and outright breach of emails for nefarious purposes all need to be pursued and dealt with. By\u00a0Mitchell Clark – In\u00a0the past 10 years, ransomware has become inescapable. All kinds of institutions …<\/span> Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":46360,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false,"jetpack_seo_schema_type":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[636],"tags":[637],"class_list":["post-46359","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ransomware","tag-ransomware"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack-related-posts":[{"id":76717,"url":"https:\/\/blog.cyberconservices.com\/index.php\/2023\/04\/25\/ransomware-101-exploring-its-inner-workings\/","url_meta":{"origin":46359,"position":0},"title":"Ransomware 101: Exploring Its Inner Workings","author":"Rick Backus","date":"April 25, 2023","format":false,"excerpt":"Ransomware is a type of malicious software that encrypts files and demands payment for decryption. It is a growing threat to businesses and individuals, with increasingly sophisticated attack methods. Understanding how ransomware works is crucial to protecting yourself and your data.","rel":"","context":"In "Blog"","block_context":{"text":"Blog","link":"https:\/\/blog.cyberconservices.com\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/blog.cyberconservices.com\/wp-content\/uploads\/2023\/04\/Kidnappers-1.png?fit=1024%2C1024&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/blog.cyberconservices.com\/wp-content\/uploads\/2023\/04\/Kidnappers-1.png?fit=1024%2C1024&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/blog.cyberconservices.com\/wp-content\/uploads\/2023\/04\/Kidnappers-1.png?fit=1024%2C1024&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/blog.cyberconservices.com\/wp-content\/uploads\/2023\/04\/Kidnappers-1.png?fit=1024%2C1024&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":44419,"url":"https:\/\/blog.cyberconservices.com\/index.php\/2020\/11\/30\/how-ransomware-defense-is-evolving-with-ransomware-attacks\/","url_meta":{"origin":46359,"position":1},"title":"How Ransomware Defense is Evolving With Ransomware Attacks","author":"Rick Backus","date":"November 30, 2020","format":false,"excerpt":"Ransomware became deadly in 2020. Healthcare facilities were attacked at an alarming rate, including one incident\u00a0in Germany\u00a0that lead to a patient death when an attack locked critical systems and a woman needing critical care was turned away. She died after she had to be taken to another city for treatment.\u00a0\u2026","rel":"","context":"In "Ransomware"","block_context":{"text":"Ransomware","link":"https:\/\/blog.cyberconservices.com\/index.php\/category\/ransomware\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/cdn.pixabay.com\/photo\/2017\/06\/19\/06\/56\/arrow-2418321__340.jpg?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":46060,"url":"https:\/\/blog.cyberconservices.com\/index.php\/2021\/04\/01\/acer-reportedly-suffered-a-revil-ransomware-attack-attracting-the-highest-ransom-demand-in\/","url_meta":{"origin":46359,"position":2},"title":"Acer Reportedly Suffered a REvil Ransomware Attack Attracting the Highest Ransom Demand in …","author":"Rick Backus","date":"April 1, 2021","format":false,"excerpt":"Acer suffered a REvil\u00a0ransomware attack\u00a0that attracted the highest\u00a0ransomware demand\u00a0in history. The threat actor behind the attack shared some of the pilfered files as proof of responsibility. However, the Taiwanese electronic behemoth was reluctant to acknowledge a ransomware attack. Instead, the company cited \u201creported abnormal situations\u201d and claimed to be \u201cconstantly\u2026","rel":"","context":"In "Ransomware"","block_context":{"text":"Ransomware","link":"https:\/\/blog.cyberconservices.com\/index.php\/category\/ransomware\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/cdn.pixabay.com\/photo\/2014\/11\/01\/22\/33\/gold-513062__340.jpg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/cdn.pixabay.com\/photo\/2014\/11\/01\/22\/33\/gold-513062__340.jpg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/cdn.pixabay.com\/photo\/2014\/11\/01\/22\/33\/gold-513062__340.jpg?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":31457,"url":"https:\/\/blog.cyberconservices.com\/index.php\/2019\/03\/22\/avast-and-emsisoft-release-free-decrypters-for-bigbobross-ransomware\/","url_meta":{"origin":46359,"position":3},"title":"Avast and Emsisoft release free decrypters for BigBobRoss ransomware","author":"Rick Backus","date":"March 22, 2019","format":false,"excerpt":"By\u00a0Catalin Cimpanu\u00a0- Avast and Emsisoft, two cyber-security firms known for their antivirus products, released today free decrypters that can help victims of the BigBobRoss ransomware recover their files without paying the ransom demand. The two decrypters are available for download from the\u00a0Avast\u00a0and\u00a0Emsisoft\u00a0sites, respectively. The ransomware is one of the smaller\u2026","rel":"","context":"In "Ransomware"","block_context":{"text":"Ransomware","link":"https:\/\/blog.cyberconservices.com\/index.php\/category\/ransomware\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.cyberconservices.com\/wp-content\/uploads\/2019\/03\/bigbobross-ransom-note.png?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":33252,"url":"https:\/\/blog.cyberconservices.com\/index.php\/2020\/03\/30\/ransomware-hits-healthcare-hardest-preys-on-smbs\/","url_meta":{"origin":46359,"position":4},"title":"Ransomware hits healthcare hardest","author":"Rick Backus","date":"March 30, 2020","format":false,"excerpt":"By Samantha Ann Schwartz - Ransomware\u00a0targeted healthcare more than any other industry, accounting for 29%\u00a0of total ransomware attacks in 2019, according to cyber insurer\u00a0Beazley's 2020 Breach Briefing report. Professional services (14%) and financial institutions (11%) rounded out the top three targets.\u00a0 Ransomware increased 131% from 2018 to 2019. About six\u2026","rel":"","context":"In "Ransomware"","block_context":{"text":"Ransomware","link":"https:\/\/blog.cyberconservices.com\/index.php\/category\/ransomware\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/cdn.pixabay.com\/photo\/2014\/12\/10\/20\/56\/medical-563427__340.jpg?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":32953,"url":"https:\/\/blog.cyberconservices.com\/index.php\/2019\/10\/30\/ransomware-the-nightmare-before-cyber-monday\/","url_meta":{"origin":46359,"position":5},"title":"Ransomware: The Nightmare Before Cyber Monday","author":"Rick Backus","date":"October 30, 2019","format":false,"excerpt":"The number of ransomware attacks on enterprises is up 500% from this time last year. Threat actors are becoming increasingly sophisticated and targeted. Ransomware is a business, and these actors want to get paid.\u00a0 Researcher Madeline Cyr interviewed me to help retailers understand the threat of ransomware for the upcoming\u2026","rel":"","context":"In "Ransomware"","block_context":{"text":"Ransomware","link":"https:\/\/blog.cyberconservices.com\/index.php\/category\/ransomware\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.cyberconservices.com\/wp-content\/uploads\/2019\/10\/skull-307778__340-300x205.png?resize=350%2C200","width":350,"height":200},"classes":[]}],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/posts\/46359","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/comments?post=46359"}],"version-history":[{"count":0,"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/posts\/46359\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/media?parent=46359"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/categories?post=46359"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.cyberconservices.com\/index.php\/wp-json\/wp\/v2\/tags?post=46359"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}