Massive ransomware attack just took out my work and ukraine, anyone else affected?

StriderX said:
Meh, it's just Ukraine.

But in seriousness, just two factor everything and it stops being a problem.
Click to expand...

Not sure you understand the situation :p

There are vulnerabilities within Windows and the services it has enabled by default itself being exploited to remotely execute commands, i.e. reach back to a command and control server and download the malware.

A very large one recently was a service that had been known to be vulnerable for almost 9 years.

Once that's done, all data is corrupt, unobtainable, gone, without paying unless the malware authors have been lazy or made mistakes.

Two factor has absolutely no relevance or protection against this, entry is not being gained by password in most cases.
 
CREATIVE!11 said:
Seems these attacks are becoming regular occurrence, maybe it's time for companies to stop forcing IT departments to operate on a shoe string budget....
Click to expand...

Indeed, it's absolutely shocking how poorly funded and supported many companies IT departments are.

On the plus side anyone looking to get into IT security which is already understaffed should make the jump.
 
Feeling glad I've taken to doing a regular full system image (which I've been a bit slack about previously) as well as backing up critical data offline (which I've always done) just in case :s

Hopefully won't be affected but needs more than just good practises with internet<>LAN border security these days.
 
CREATIVE!11 said:
Seems these attacks are becoming regular occurrence, maybe it's time for companies to stop forcing IT departments to operate on a shoe string budget....
Click to expand...
Please tell that to our directors!

The attitude is "everything works, why are we paying you" shortly followed by "nothing works why are we paying you" :p
 
Plenty O'Toole said:
Two factor has absolutely no relevance or protection against this, entry is not being gained by password in most cases.
Click to expand...
may not be the case here, but patient zero infection could be established into an organisation via remote VPN access into the password protected network,
albeit many organisations do have a secure key (2fa) to enable access.
 
You must log in or register to reply here.
Back
Top Bottom