Qusstion Read the passage and answer the questiots that follow: A ranomeare pang calling itself "Snatch" - affer the iconic Guy Ritchic film relensed in 2000 - has daimed responsibility for exfilarating 200 icrabytes of data from the South African Department of Defence (DOD). The group has apparcently posted enly a fraction of the data it stole onliee, releasing a 4996B compressed archive that it says catracts to anouse coefirmed that the leak appeared legitimate. They said the data came froe the DOD, not an affiliated company like Armscor or Denet. In addition to leaking DOD data, Seatch also posted the contact infoemation of screnal senior government officiab online - including phone numbers it says belong so Cyril Ramaphosa. Checking the lise of eight cellphone numbers against Truecaller's database revealed that two could belone to South Africa's sieting president. According to sybernecurity compary Sophos, Snatch wass an antack medel network throogh haman-directed action. Their malware reboots Windosas machines into Safe Mode before enerypting the data they wish to hold ransom. The attackens may be using this technique to circurnent endpoint protestion, which often won't ran in Safe Mode," Sopbos. said. When it discovered this attack vtctor in 2019 . Sophos quickly raiked the alarm as the severity of rasooemware that runs in Safe Mode was a significam threat. In adsition to the novel modus eperandi. Sophos also found froms recruitenent past that Snasch eely accegicd Rusian speakers inte the gang. lnserestingly, the Russian-language gang chose the weck ef the BRICS Summit, which is being hosted in South Africa, to release the data it exfiliraled from the DOD. Accorting to Seatch itwelf, this was no coincidence. The projoct is a year old, about 2007T of data was extracted during the year," it kaid ita a post online. Serocnishot from the Seatch ransomware proup'i website aboul data it stale from the South African Depurtment of Defence Snahch sad in specifically cheoe the weck of Ee BRICS mummir to reflease the data. It then wed the opsortunity to spread its messape that South Afrnca is Lundering arms foe the United Stanes and mesey fec corporations, They also accused Ramaphosa of beine the main anms baron of the black continent of the main gaket foe latsdering arms contracts in the USA." AdAitionally, the attackers said. The BRICS suminih for Africa is jus a sereen tssucd by the whate masters finm a coumtry wish a ceenantly sumbling president.- Snatch's statement fevealed a telativily poos prase of geopolitics and Soust Africa's donsestic polities. Ramaphosa's government has keen routinely criticied for its unaligned stance on Russia's invasion of Ukraine, Potinical analysts have warned that South Afnea stands to be cocluded from the United States' African Gifontl and Oportunity Aet (AGOA), losing ou on bellions in exports. Feemer Warld Bank presickem David Malpass warned Sondh Africa was playing with fire by trying to play conareries agaitu.

1. Qusstion Read the passage and answer the questiots that follow: A ranomeare pang calling itself
"Snatch" - affer the iconic Guy Ritchic film relensed in 2000 - has daimed responsibility for
exfilarating 200 icrabytes of data from the South African Department of Defence (DOD). The
group has apparcently posted enly a fraction of the data it stole onliee, releasing a 4996B
compressed archive that it says catracts to anouse coefirmed that the leak appeared legitimate.
They said the data came froe the DOD, not an affiliated company like Armscor or Denet. In
addition to leaking DOD data, Seatch also posted the contact infoemation of screnal senior
government officiab online - including phone numbers it says belong so Cyril Ramaphosa.
Checking the lise of eight cellphone numbers against Truecaller's database revealed that two
could belone to South Africa's sieting president. According to sybernecurity compary Sophos,
Snatch wass an antack medel network throogh haman-directed action. Their malware reboots
Windosas machines into Safe Mode before enerypting the data they wish to hold ransom. The
attackens may be using this technique to circurnent endpoint protestion, which often won't ran in
Safe Mode," Sopbos. said. When it discovered this attack vtctor in 2019 . Sophos quickly raiked
the alarm as the severity of rasooemware that runs in Safe Mode was a significam threat. In
adsition to the novel modus eperandi. Sophos also found froms recruitenent past that Snasch eely
accegicd Rusian speakers inte the gang. lnserestingly, the Russian-language gang chose the weck
ef the BRICS Summit, which is being hosted in South Africa, to release the data it exfiliraled
from the DOD. Accorting to Seatch itwelf, this was no coincidence. The projoct is a year old,
about 2007T of data was extracted during the year," it kaid ita a post online. Serocnishot from
the Seatch ransomware proup'i website aboul data it stale from the South African Depurtment of
Defence Snahch sad in specifically cheoe the weck of Ee BRICS mummir to reflease the data. It
then wed the opsortunity to spread its messape that South Afrnca is Lundering arms foe the
United Stanes and mesey fec corporations, They also accused Ramaphosa of beine the main
anms baron of the black continent of the main gaket foe latsdering arms contracts in the USA."
AdAitionally, the attackers said. The BRICS suminih for Africa is jus a sereen tssucd by the
whate masters finm a coumtry wish a ceenantly sumbling president.- Snatch's statement fevealed
a telativily poos prase of geopolitics and Soust Africa's donsestic polities. Ramaphosa's
government has keen routinely criticied for its unaligned stance on Russia's invasion of Ukraine,
Potinical analysts have warned that South Afnea stands to be cocluded from the United States'
African Gifontl and Oportunity Aet (AGOA), losing ou on bellions in exports. Feemer Warld
Bank presickem David Malpass warned Sondh Africa was playing with fire by trying to play
conareries agaitut ene another, which coulat hart the country's relationship with the IS, IS rowet
ambassades to South Africa, Reuben Briecty, accused South Africa of supplyine weapen and
ammunitive to Ressia carlier this year. This was afler the Russian cargo ship Lady R
ceetroversially docked at the Simon's. Toan naval tase so oflood weipons Sondh Africa had R

2. refianed to Rusia emply. a piece of Chappies [bubble gum]," In adilition to their claims that
South Afriea was a bed with the Linided Stanes, Seatch also said their website has faced contant
denial-of-senice anacks since posting the South African DOD lesk. "The folks from the Ministry
of Defenic (of beir American curators) ecally do not want this informatios to pop up al the
sannain's eve to spend a couple of extra millioa dollars ko destroy our sceitce of information
Several days Later, the group said it was beginfing to feel respect for Africa. Neither the
Americans not the Europeans could afford to spend such resources to attack our project," they
claimed. "Repecsentatives of South Africa have been doing this foe the thind day in a fore, and,
jadping malion] a day. But frankly speakine, they would rather spend this money on their
aetwork. iefrastructure and secerity."
MyEroadband contacted the Department of Defence for comment. fi did not ropond by
publicatioe. Following media reposts about the data becach, the attacken have statod that they are
not the "Snatch" rancemware gang, "We have nothing to do widh the Snatch ransomware project
that appeared in 2019 and existed for about 2 years," they claim. We ane the Security
Notification Attachment iSNAtch for shont) Team, a grosep specialtzing cuclusively in leaked
sensitive data." The group said it does not deal in rancomarare. "We doa"t aim to stop a company
[or critical infrastructure] from operating by attacking it with soffuare that blocks the control
servers." Snath statcd. If joamulists analyze ewr work carcfully, they will see that not a single
cliem of ours has boen attacked by a maluare that can be callod Snatch." they said. "Yes, many
of them have been antacked by various rassonsware, as we ate open for cooperation and often
groups that week in this diection give us unique confidential dats that were leaked from the
attacked companies. But ence again, the Saanch locker that we ane compared to in the media has
never been used. 1. What afe the common velecrabilinies and Artack Types that you know? 2.
What are some risk and security mssessments shoold the department of defence undertake? 3. In
terms of riak tesponse what woeld you alvise the department of defenee to de? 4. Every
organisation mua plas and ealine security policies, ie the document the incident regpone must be
clearly defined. tise the six stages of mecident respoese to help the departmest of defesce to
handle the situation above. 5. List perevention methods that the department shoald think of when
implementing their systems. 6. Would a firewall help in this case? Explais your madentanding of
a fetwall in referesec is the case above. Portect 7. What are your vieus on dotection systens? Do
you think is will help is making nere that the department of defence systems are sectur? 8.
Fixplain the ClA Triad 9. Briefly expiain wene of the enerryptien tectaplegies Do you think
goveminents ahould be allowed to use wach lools? In South Africa how will this contradict POPI
ACT?