Elektrine
Log in Register

#pwr2

3 posts · Last used 2d

Power of 2 @pwr2@infosec.exchange
· 2mo ago
#Pwr2 #LiveWargame ⚔️ The administrators checked the computer of a user who claimed to have ransomware. They confirmed the suspicion: the ransomware group 'Akira' threaten to leak your data if you do not pay within 14 days. What do you do? (solution will come in a week, stay tuned!) #Cybersecurity #Infosec #DFIR

#Pwr2 #LiveWargame ⚔️ The administrators checked the computer of a user who claimed to have ransomware. They confirmed the suspicion: the ransomware group 'Akira' threaten to leak your data if you do not pay within 14 days. What do you do? (solution will come in a week, stay tuned!) #Cybersecurit

0
0
0
1
Power of 2 @pwr2@infosec.exchange
· 2mo ago

RE: https://infosec.exchange/@pwr2/116956792232667129

#Pwr2 #LiveWargame #Solution ⚔️

Solution from last week:

  • In practice: often crisis board is established while the administrators secure logs and backups. Common pitfalls are that backups are restored immediately and there is no documentation. Such a measure destroys evidence and brings no benefit because systems are encrypted directly again.

  • The incident could also be reported to the authorities. While this is a valid point, maybe it is better to first gather more information what happened.

  • As for paying ransom: please do consult a legal expert before paying ransom. Ransom payments itself could already be illegal and bring more trouble.

🛡️ Stay secure.

#Cybersecurity #Infosec #DFIR

Quoting
Power of 2
@pwr2@infosec.exchange
#Pwr2 #LiveWargame ⚔️ The administrators checked the computer of a user who claimed to have ransomware. They confirmed the suspicion: the ransomware group 'Akira' threaten to leak your data if you do not pay within 14 days. What do you do? (solution will come in a week, stay tuned!) #Cybersecurity #Infosec #DFIR
Open quoted post
0
0
0
0
You've seen all posts