Can 'Mad Libs for incident response' prevent the next MOVEit?
While MOVEit is just the latest example of a managed file transfer tool being exploited by criminals to maximize the amount of data – and money –— they can grab, these types of attacks aren't going to stop anytime soon. From the miscreant perspective, they represent the perfect crime.
That is, unless the defenders can get out ahead of the next MFT mass exploitation. John Dwyer, head of research for IBM Security X-Force, claims his team has developed a framework to make this happen.caught up with him prior to Hacker Summer Camp."It would be criminal not to learn from our past mistakes," Dwyer said.
The reason why MFTs make such attractive targets for criminals is because they are essentially a one-stop shop for extortion, he explained. "If you think about the goals and objectives of attackers, they basically boil down to two things: I'm going to steal data and then extort you against the theft of that data. Or I'm going to disrupt your operations and extort you against recovery of those systems," Dwyer told"MFTs, by nature of their design, are meant to be a system that is exposed to external parties, and they transact and transfer sensitive data between enterprises," he continued.
"So it fits into that nice little Venn diagram of what does an attacker need to do to cause enough pressure or create enough impact that an organization could be convinced to pay," Dwyer explained.
Danmark Seneste Nyt, Danmark Overskrifter
Similar News:Du kan også læse nyheder, der ligner denne, som vi har indsamlet fra andre nyhedskilder.
Study reveals link between self-perceived antibody response and actual COVID-19 protectionStudy reveals link between self-perceived antibody response and actual COVID-19 protection sciencedirect UniKonstanz antibody COVID19 SARSCoV2 percieved
Læs mere »
Female taxi driver threatened with a knife during Belfast robberyThe driver was left badly shaken following the incident
Læs mere »
Gran Turismo film criticised for ‘reframing’ real-life spectator death | VGCCritics have accused the Gran Turismo film of allegedly 'reframing' the events of a real-life incident in which a spectator died.
Læs mere »
Woman accused of attempting to murder 16-year-old in GlasgowThe teenager was left seriously injured after the incident near a shopping centre in Glasgow.
Læs mere »
Police treated after hazardous material found in Glasgow flatEmergency services staff became unwell following an incident in the east end of Glasgow.
Læs mere »