When it comes to cybercrime, it's easy to think we're on the road to disaster. After all, even big companies make serious mistakes - Yahoo, for example, reported that it had lost data from 1,000,000,000 user accounts (in American English, that's a BILLION!), then realised it was probably more like *three* billion accounts. And then there was Equifax... Are we all doomed? Paul Ducklin doesn't think so - and he's raring to pass on his optimism. Of course, there are a few things we all need to do to help out along the way... so he'll tell you what those are, too.

1. Paul Ducklin
Senior Technologist
Cybercrime -
why we're not
doomed after all

2. Paul Ducklin
Who am I?
duck@sophos.com
@duckblog
nakedsecurity.sophos.com

3. There's a lot of talk about

4. 81.2965% [*] of network intrusions
are caused by users
who open treacherous emails,
poisoned links or booby-trapped
attachments and later wish they hadn't
“
”[*] Approximately

5. https://nakedsecurity.sophos.com/urgent-update-your-mac-again-right-now/

8. https://nakedsecurity.sophos.com/3-billion-yahoo-accounts-affected-by-2013-breach/

9. https://nakedsecurity.sophos.com/satan-ransomware-old-name-new-business-model/

11. 1 Click for a working ransomware sample.
2 Download it free.
3 Set your own price and payment conditions.
4 Let the crooks collect the ransom.
5 Get the decryption tools from the crooks.
6 Hand over 30% of the revenue.
How to use Satan

15. https://nakedsecurity.sophos.com/spora-ransomware-goes-freemium-with-four-different-payment-options/

17. https://nakedsecurity.sophos.com/equifax-website-hit-by-malvertising-will-the-pain-never-end/

18. First there was the breach, then the silly
domain name, then the tweet that
advertised a mis-spelling of the silly domain
name, then the news that the breach was
bigger than first thought, and then the news
that the breach was bigger than first
thought by more than was first thought.
“

19. ...is not a surprising word to hear
Therefore...

20. 4 Ps
Patches
Passwords
Prevention
Proactivity