Download as PDF, PPTX
Uploaded byKaspersky
Ransomware in targeted attacks
The document discusses the rising issue of ransomware in targeted attacks, highlighting groups such as Mamba and Petrwrap that exploit vulnerabilities to gain control of networks. Key motivations for these attacks include financial gain and diversion from advanced persistent threats. The document concludes that targeted ransomware attacks are a significant trend in 2017, emphasizing the importance of perimeter protection and proactive incident response strategies.
More Related Content
![[CONFidence 2016] Gaweł Mikołajczyk - Making sense out of the Security Operat...](https://cdn.slidesharecdn.com/ss_thumbnails/gawemikoajczyk-makingsenseoutofthesecurityoperations-160601113717-thumbnail.jpg?width=640&height=640&fit=bounds)
Similar to Ransomware in targeted attacks
Ransomware in targeted attacks
- 1. RANSOMWARE IN TARGETED ATTACKS Ivanov Anton Kaspersky Lab
- 2.
- 3. CISO NIGHTMARE STORY 3Security Analyst Summit 2017
- 4. CISO NIGHTMARE STORY 4Security Analyst Summit 2017
- 5. HOW BIG IS THE PROBLEM?
- 6. HOW BIG IS THE PROBLEM? 6Security Analyst Summit 2017
- 7. WHO IS INVOLVED? 7Security Analyst Summit 2017
- 8. MOTIVATION 8Security Analyst Summit 2017 1) Money 2) Diversion from APT attack 3) Unfortunately it is very easy and cheap for attackers L
- 9.
- 10. ACTORS BEHIND TARGETED ATTACKS
- 11. 11Security Analyst Summit 2017 Actors behind targeted attacks with ransomware: • Mamba group • PetrWrap group • Partners of one famous underground group ACTORS BEHIND TARGETED ATTACKS
- 12. MAMBA GROUP 12Security Analyst Summit 2017
- 13. MAMBA GROUP 13Security Analyst Summit 2017
- 14. MAMBA GROUP 14Security Analyst Summit 2017
- 15. MAMBA GROUP 15Security Analyst Summit 2017
- 16. MAMBA GROUP 16Security Analyst Summit 2017
- 17. MAMBA GROUP 17Security Analyst Summit 2017
- 18. MAMBA GROUP 18Security Analyst Summit 2017 1) Uses exploits to own an organization’s network 2) Installs PUPY Rat for persistence 3) Uses mimikatz 4) PsExec for ransomware is installed
- 19.
- 20.
- 21.
- 22.
- 23.
- 24. PETRWRAP GROUP 24Security Analyst Summit 2017
- 25. PETRWRAP GROUP 25Security Analyst Summit 2017
- 26. PETRWRAP GROUP 26Security Analyst Summit 2017
- 27.
- 28. 3RD PARTY PARTNERS 28Security Analyst Summit 2017
- 29. 3RD PARTY PARTNERS 29Security Analyst Summit 2017
- 30. 3RD PARTY PARTNERS 30Security Analyst Summit 2017
- 31. 3RD PARTY PARTNERS 31Security Analyst Summit 2017
- 32. 3RD PARTY PARTNERS 32Security Analyst Summit 2017
- 33. 3RD PARTY PARTNERS 33Security Analyst Summit 2017
- 34. 3RD PARTY PARTNERS 34Security Analyst Summit 2017
- 35.
- 36.
- 37. CONCLUSIONS 37Security Analyst Summit 2017 • Targeted attacks with ransomware will be the main ransomware trend in 2017 • Protect the perimeter • In the event of an attack, good IR could help • DO NOT PAY • Use security solutions with a behavioral detection component
- 38.