Ransomware: The Real Pandemic

Jeremy Rasmussen: Ransomware: The Real Pandemic Our firm gets about a call per week for ransomware cleanup & remediation. The situation has reached *pandemic* proportions. For COVID-19, you are supposed to wear a mask and socially distance. Even so, some people still get the virus. Unfortunately, none of these ransomware victims were doing all the right things in accordance with best practices to avoid their situation. If they had, we would have been able to spot some of the earmarks of these attacks earlier in the kill-chain and stop them before they reached critical levels. We will walk through case studies of some more interesting things we have seen over the past year to highlight the tools, techniques, and practices of ransomware gangs (Maze in particular). We will discuss what happens in DFIR from Day 1 through restoration. Then, we will discuss those sacrosanct best practices that would have lowered the risk of falling victim to such attacks. If you are in IT security management and have not had your ransomware attack yet, it is coming. How prepared you will be to limit & contain its impact is up to you. This talk will give you ammunition for battle. ----------- WEB: https://www.bsidestampa.net DISCORD: https://discord.gg/FhdkSNa24P TWITTER: https://twitter.com/bsidestampa MERCH: https://bsides-tampa.launchcart.store/ About BSides Tampa: B-Sides Tampa is an Information Technology Security Conference hosted by the Tampa Bay Chapter of (ISC)², a registered 501(c)3 non-profit organization. The purpose of the B-Sides Tampa is to provide an open platform for Information Security industry professionals to collaborate, exchange ideas and develop long standing relationships with others in the community. The B-Sides Tampa IT Security Conference took place Virtually on March 27th, 2021.