41:02This recording is not available yet.
Categories
Application SecuritySoftware Supply ChainSecurity Operations & Incident ResponseIncident Response & ForensicsThreats & Threat IntelligenceNation-State & GeopoliticsRansomware
Vendors and tools discussed
Sponsored by
About this session
Dorit Dor, chief product officer at Check Point, traces ransomware from CryptoLocker's 300-dollar demands in 2013 through WannaCry and the NotPetya wiper in 2017 to double extortion in 2019 and today's triple extortion, which also threatens victims' customers and employees, with ransoms now in the tens of millions. With over 1,200 organisations hit weekly and a 32 percent rise in North America in 2021, she dissects three cases: REvil's Kaseya supply-chain attack, which abused a trusted update tool to encrypt over a thousand businesses in 17 countries on the 4th of July weekend; Colonial Pipeline, hit by a DarkSide affiliate, which paid about 5 million dollars, mostly recovered later by the FBI; and JBS, breached in February, discovered in June, with 45 gigabytes exfiltrated and 11 million paid. She frames ransomware as the last stage of an intrusion and prescribes hygiene, prevention, segmentation, MFA, patching and anti-ransomware EDR. A follow-up interview covers early warning signs, the talent shortage (prevention, automation, MDR), whether to pay, zero-trust boundaries for suppliers, and why most so-called zero-days reuse vulnerabilities from 2016 or earlier.
The attack on IT management software firm, Kaseya, combined two of 2021’s most notorious cyber-attack trends—supply chain attacks and ransomware. At least 1,000 businesses are said to have been affected by the attack, with victims identified in at least 17 countries. As a matter of fact, Check Point Research team found that average number of ransomware attacks increase by 93 in the last 12 months. It wasn’t that long ago that ransomware didn’t even exist. How did we get to this point? And is there any way to stop this most popular trend in cybercrime, before it’s too late? Join this session where Dr. Dorit Dor (PhD) Chief Products Officer at Check Point will provide more insights on the Ransomware phenomena and discuss how organizations can remain protected against this growing global trend.
Key takeaways
- Treat ransomware as the final stage of an intrusion: invest first in network hygiene and prevention at the entry points (attachments, links, credentials) so early signs are visible.
- Confine supplier tools such as RMM agents to their expected behaviour and destinations, and demand that suppliers patch their own surface fast; Kaseya was trusted, signed software.
- Segment the network, enforce MFA and block infected machines from reaching others so one compromised host cannot become a thousand.
- Decide the pay-or-not question as a business risk decision in advance, knowing that paying does not stop leaks under double or triple extortion.
- Close vulnerabilities from 2016 to 2019 first; over half of 2021 attacks used them, and most malware is a variant of well-known families sold as a service.
Speakers
Dorit Dor
Dr. Dorit Dor serves as Vice President, Products for Check Point Software Technologies. She manages all product definition and development functions for both the enterprise and consumer divisions of the Company. Dr. Dor's core responsibilities… Read moreRead less
Dr. Dorit Dor serves as Vice President, Products for Check Point Software Technologies. She manages all product definition and development functions for both the enterprise and consumer divisions of the Company. Dr. Dor's core responsibilities include leading the company's product management, research and development (R&D) and quality assurance (QA) initiatives from concept to delivery. Dr. Dor has served in several pivotal roles in Check Point's R&D organization. She has been instrumental to the organization's growth and managed many successful product releases. She has been published in several influential scientific journals for her research on graph decomposition, median selection and geometric pattern matching in d-dimensional space. In 1993, she won the Israel National Defense Prize. Dr. Dor holds a Ph.D. and M.S degree in computer science from Tel-Aviv University, in addition to graduating cum laude for her Bachelor of Science degree.
