Sophos provides five portents that ransomware is in your future

Stefan Mileschin · 6th August 2020, 17:49

Holy Oracles!

Security experts at Sophos have released a report which provides five clues that your network is about to be hit by ransomware and apparently this does not require you to read the entrails of any woolly mammal.

The report with the catchy title "The realities of ransomware: Five signs you’re about to be attacked" said that Sophos had been working a lot with ransomware victims to see if there was anything odd in the lead up to a ransomware attack.

"We spend some time looking back through our telemetry records that span the previous week or two. These records sometimes include behavioral anomalies that (on their own) may not be inherently malicious, but in the context of an attack that has already taken place, could be taken as an early indicator of a threat actor conducting operations on the victim’s network. If we see any of these five indicators, in particular, we jump on them straight away. Any of these found during an investigation is almost certainly an indication that attackers have poked around: to get an idea of what the network looks like, and to learn how they can get the accounts and access they need to launch a ransomware attack", the report said.
https://fudzilla.com/news/51302-soph...in-your-future

6th August 2020, 17:49	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 148,769	Sophos provides five portents that ransomware is in your future Holy Oracles! Security experts at Sophos have released a report which provides five clues that your network is about to be hit by ransomware and apparently this does not require you to read the entrails of any woolly mammal. The report with the catchy title "The realities of ransomware: Five signs you’re about to be attacked" said that Sophos had been working a lot with ransomware victims to see if there was anything odd in the lead up to a ransomware attack. "We spend some time looking back through our telemetry records that span the previous week or two. These records sometimes include behavioral anomalies that (on their own) may not be inherently malicious, but in the context of an attack that has already taken place, could be taken as an early indicator of a threat actor conducting operations on the victim’s network. If we see any of these five indicators, in particular, we jump on them straight away. Any of these found during an investigation is almost certainly an indication that attackers have poked around: to get an idea of what the network looks like, and to learn how they can get the accounts and access they need to launch a ransomware attack", the report said. https://fudzilla.com/news/51302-soph...in-your-future

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Garmin recalculates after ransomware attack	Stefan Mileschin	WebNews	0	28th July 2020 10:51
New Mac ransomware is super smug	Stefan Mileschin	WebNews	0	6th July 2020 08:59
Unconventional form of ransomware seen in the wild	Stefan Mileschin	WebNews	0	14th November 2019 08:30
Thoma Bravo buys Sophos	Stefan Mileschin	WebNews	0	16th October 2019 14:28
Even DSLR cameras are vulnerable to ransomware	Stefan Mileschin	WebNews	0	13th August 2019 07:17
First known Mac ransomware reaches the wild	Stefan Mileschin	WebNews	0	7th March 2016 09:20
Sophos parter firm charged with fraud	Stefan Mileschin	WebNews	0	29th September 2015 13:42
Google slams Sophos security	Stefan Mileschin	WebNews	0	8th November 2012 06:17
One in Every Five Mac Computers Harbors Malware, Sophos Research Reveals	Stefan Mileschin	WebNews	0	25th April 2012 06:47
Apple Won't Give Mac Users Free Virus Protection, So Sophos Decides To	jmke	WebNews	0	4th November 2010 16:31