Presented at Executive Leaders Network CMO/DPO/CIO/CISO Event on October 06th. "Last year a staggering 21% of Hornetsecurity Ransomware Attack Survey respondents reported that their organisations fell victim to a ransomware attack. On top of that consider that over 22% of companies reported thinking that Microsoft 365 data cannot be impacted by ransomware attacks, or do not know if it can be impacted. How have things changed since? What is the current state of the ransomware ecosystem today? Join us as we deep dive into the results of this year's annual ransomware survey and explore the current trends, threats, and news from the industry. Audience Takeaways • Current Ransomware Trends • Ransomware and Microsoft 365 • Protection Techniques • And More!"

2. 2021 trends
 Lockdown and home usage drove more attacks
 Growth of 365, WFH and Teams
• Use of any machine to access data and continue to work
 82% increase Ransomware attacks
 CEO Fraud
 170+ new adversaries
 45% increase in intrusion campaigns
 PaaS
• Phishing as a Service
• Dark web
• Great tech support!!
 Business email compromise
 Social engineering
 Account takeover attacks – Linkedin new starters

3. Ransomware
Today’s Highwayman?
 80% UK Companies experienced some form of attack in 2021/2022
 Over 12 months Ransomware affected 73% of UK companies
 43% of ransomware attacks in the UK were stopped prior to data encryption
 13% of UK organisations ended up paying the ransom
 The average cost of ransomware attacks in the UK was around $1.08 million
 77% of UK organisations have cyber security insurance
 Around 8% of people tried to open a phishing link in 2021
 1.2% of scam websites have a .co.uk domain
 https://www.comparitech.com/blog/information-security/uk-cyber-security-statistics/

4. They are Professional!
Better support than many vendors?

5. WE let Ransomware in!
It can only come in if we let them in!

6. Network
61%
Endpoint
19%
Email 8%
Web
12%
93%
All breaches are attacks
targeting people,
96% via email

7. What is CEO Fraud?
 CEO Fraud is a scam in which cybercriminals spoof company email accounts and impersonate executives to try
and fool an employee in accounting or HR into executing unauthorized wire transfers, or sending out confidential
tax information.
 The FBI calls this type of scam "Business Email Compromise" and defines BEC as “a sophisticated scam
targeting businesses working with foreign suppliers and/or businesses that regularly perform wire transfer
payments. The scam is carried out by compromising legitimate business email accounts through social
engineering or computer intrusion techniques to conduct unauthorized transfers of funds.”
 According to FBI statistics, CEO fraud is now a $26 billion scam. Between May 2018 and July 2019, there was a
100% increase in identified global exposed losses. The scam has been reported in all 50 states and in 150
countries. Victim complaints filed with the IC3 and financial sources indicate fraudulent transfers have been sent
to banks from roughly 140 countries.

9.  Social engineering is all about manipulating individuals on an interpersonal level. It involves the hacker trying to
gain their victim’s trust and persuade them to reveal confidential information, for example, or to share credit card
details and passwords.
• Won’t happen to me?
 Hackers will usually target an employee who is authorized to carry out financial transactions, sending them an
urgent message from a fake email address that looks like it has come from the boss.

11. https://phishingquiz.withgoogle.com/

13. WE CAN’T ALWAYS RELY ON HUMANS!
A flagrant “plug”!