Can 'Mad Libs for incident response' prevent the next MOVEit?
While MOVEit is just the latest example of a managed file transfer tool being exploited by criminals to maximize the amount of data – and money –— they can grab, these types of attacks aren't going to stop anytime soon. From the miscreant perspective, they represent the perfect crime.
That is, unless the defenders can get out ahead of the next MFT mass exploitation. John Dwyer, head of research for IBM Security X-Force, claims his team has developed a framework to make this happen.caught up with him prior to Hacker Summer Camp."It would be criminal not to learn from our past mistakes," Dwyer said.
The reason why MFTs make such attractive targets for criminals is because they are essentially a one-stop shop for extortion, he explained. "If you think about the goals and objectives of attackers, they basically boil down to two things: I'm going to steal data and then extort you against the theft of that data. Or I'm going to disrupt your operations and extort you against recovery of those systems," Dwyer told"MFTs, by nature of their design, are meant to be a system that is exposed to external parties, and they transact and transfer sensitive data between enterprises," he continued.
"So it fits into that nice little Venn diagram of what does an attacker need to do to cause enough pressure or create enough impact that an organization could be convinced to pay," Dwyer explained.
Belgique Dernières Nouvelles, Belgique Actualités
Similar News:Vous pouvez également lire des articles d'actualité similaires à celui-ci que nous avons collectés auprès d'autres sources d'information.
Study reveals link between self-perceived antibody response and actual COVID-19 protectionStudy reveals link between self-perceived antibody response and actual COVID-19 protection sciencedirect UniKonstanz antibody COVID19 SARSCoV2 percieved
Lire la suite »
Female taxi driver threatened with a knife during Belfast robberyThe driver was left badly shaken following the incident
Lire la suite »
Gran Turismo film criticised for ‘reframing’ real-life spectator death | VGCCritics have accused the Gran Turismo film of allegedly 'reframing' the events of a real-life incident in which a spectator died.
Lire la suite »
Woman accused of attempting to murder 16-year-old in GlasgowThe teenager was left seriously injured after the incident near a shopping centre in Glasgow.
Lire la suite »
Police treated after hazardous material found in Glasgow flatEmergency services staff became unwell following an incident in the east end of Glasgow.
Lire la suite »