Tuesday, June 30, 2020

Ransomware observations

AT&T’s Digital Forensic Incident Response (DFIR) team has been observing cybercriminal organizations steadily increase their ransomware capabilities over the last few years.  We have seen ransomware grow in sophistication and capability at a rapid pace.  So rapidly in fact, that each investigation shows a new tactic or change in the binary program responsible for encrypting clients’ data. 
Not only are the digital tools advancing in scope and complexity, but also the tradecraft.  Up until a few years ago cyber criminals did not particularly care about the evidence they left behind.  The payoff was so high and with so many vulnerable networks it did not make sense to go slow.  But those times have slowly manifested into today’s ransomware capabilities, and no one is immune. 
Ransomware first appeared in 1989 called PcCyborg was very simple and easily circumvented….

Geoff Mefford Posted by:

Geoff Mefford

Read full post

      

The post Ransomware observations appeared first on Cybersecurity Insiders.


June 30, 2020 at 09:09PM

0 comments:

Post a Comment