AstraLocker 2.0 Ransomware is a Smash & Grab Variant

A version of AstraLocker, AstraLocker 2.0 ransomware, has just been released. This updated version is what some threat analysts call a rapid attack, or smash-and-grab style of ransomware. The AstraLocker 2.0 developers use Microsoft Word attachments in emails to distribute [...]

2022-12-15T01:00:38-08:00July 1st, 2022|

LAPSUS$: The New Extortion Group Causing a Scene

A new threat actor group is behind an infamous wave of attacks impacting companies like Microsoft, Nvidia, Okta, and most recently Globant, among others. LAPSUS$, tracked as DEV-0537 by Microsoft, is relatively less sophisticated than other hacking and extortion groups [...]

2022-04-08T17:40:39-07:00April 1st, 2022|

Cybersecurity Transformations Since the Russia/Ukraine Conflict

In the past few days since the Russia/Ukraine conflict, there have been some changes in the cybersecurity landscape. Below are some of my personal observations from our Ransomware Recovery business unit. I am curious if other incident response professionals, ransomware [...]

2022-03-04T12:27:57-08:00March 2nd, 2022|

Ransomware Attacks Trending Towards Mid-Sized Targets

Last year, there was considerable evolution in terms of ransomware trends and techniques. In the US, and abroad, we saw many high-impact attacks being carried out against critical infrastructure entities. These highly disruptive and highly publicized attacks brought increased pressure [...]

2022-04-08T17:42:12-07:00February 14th, 2022|

Cyber Safety Tips for the Holidays

With the holiday season now in full swing, we wanted to share some helpful cyber safety tips and guidance when it comes to your cybersecurity strategies (or lack thereof). The Cybersecurity and Infrastructure Security Agency, as well as the FBI, [...]

2022-02-27T23:55:26-08:00December 10th, 2021|

How Much Does It Cost to Recover from Ransomware?

The cost to recover from ransomware will depend on many factors. The three key variables are the size of your company, the complexity of the network and applications, and the ransomware gang that attacked you. There are many more variables [...]

2022-02-28T00:02:03-08:00August 6th, 2021|

What is Network Segmentation, aka VLAN?

Segmenting your network is when you compartmentalize your networks in order to deliver specific security controls and services, and to manage network congestion. With the trend of ransomware attacks being more focused on disrupting business operations, it is critical that [...]

2022-02-28T00:03:41-08:00July 28th, 2021|

Reduce the Risk of Ransomware & Other Cyber Attacks

Hopefully, you have seen the news about the growing reality of ransomware and how it is impacting companies and government entities on a global scale. While ransomware is not new, the severity, reach and costs associated with this cyber threat [...]

2022-11-28T23:22:50-08:00June 29th, 2021|