Ransomware Threat Hits Critical Mass

[frogboy]

Content source

http://www.infosecurity-magazine.com/news/ransomware-threat-hits-critical/

An overwhelming surge in ransomware extortion attacks has sparked a joint statement from the US Department of Homeland Security and the Canadian Cyber Incident Response Centre.

"Infections can be devastating to an individual or organization, and recovery can be a difficult process that may require the services of a reputable data recovery specialist," the two governments said in the alert. "Paying the ransom does not guarantee the encrypted files will be released. It only guarantees that the malicious actors receive the victim's money, and in some cases, their banking information."

The victims are of late often in the healthcare sector. For instance, MedStar, the U.S. capital region's largest healthcare provider with 10 hospitals and more than 200 outpatient offices,shut down much of its computer network this week. Hackers had used ransomware to encrypt data on some computers and then demanded a ransom of $18,500.

Part of the reason for the outbreak is simple economics—the barriers to entry for carrying out the attacks have been lowered.

"The recent increase in ransomware attacks is being driven by a proliferation in ransomware toolkits,” said John Gunn, VP of communications at VASCO Data Security, in an email. “Anyone can buy the tools to conduct ransomware attacks for as little as $100 on the dark web. It’s a numbers game—more attackers equals more victims.”

Brian Laing, VP of products and development at Lastline, told us in an email that one of the biggest reasons why companies are unprepared is that they simply do not understand the impact.

Full Article. Ransomware Threat Hits Critical Mass

 

[cruelsister]

One thing that is really getting annoying are comments like those in this article: “People have to stop clicking on links in malicious emails—they didn’t just win the lottery, they don’t have a huge refund coming, and a beautiful foreign lady does not want to date them."

Yes indeed, people should be wiser. However the real issue is if whatever organization attacked had adequate security in place in the first place it would not matter what link was clicked. It's time that the traditional method of Security is indicted and not the careless user.

 

[Mr.X]

It's time that the traditional method of Security is indicted and not the careless user.

Exactly. Careless users won't decrease in number, on the contrary, they are increasing every day. The average user won't spend the time learning about new security habits for various reasons but most important: people are lazy.
Hence the security model in place is paramount for the safety of an organization environment.

 

[jamescv7]

You know the one thing here is being knowledgeable and educated, honestly many countries in the world are not so much affected by ransomware wave since typical user knows the right and wrong.

However also on the responsibility of those organization to promote good ethics and preventive measures.