Cybersecurity Webinar Series - Ransomware is Alive and ...€¦ · 1. Assessing Your Biggest...

21
© 2020 Jack Henry & Associates, Inc. ® 1 © 2020 Jack Henry & Associates, Inc. ® Rick Phillips – Stickley on Security Viviana Campanaro – CISSP Gladiator Security & Compliance Sales Engineer Cybersecurity Webinar Series - Ransomware is Alive and Well: Are you? February 12, 2020

Transcript of Cybersecurity Webinar Series - Ransomware is Alive and ...€¦ · 1. Assessing Your Biggest...

Page 1: Cybersecurity Webinar Series - Ransomware is Alive and ...€¦ · 1. Assessing Your Biggest Security Risks Before It Is Too Late –October 29 th 2. Machine Learning and the Latest

© 2020 Jack Henry & Associates, Inc.®1 © 2020 Jack Henry & Associates, Inc.®

Rick Phillips – Stickley on Security

Viviana Campanaro – CISSPGladiator Security & Compliance Sales Engineer

Cybersecurity Webinar Series -Ransomware is Alive and Well: Are you?

February 12, 2020

Page 2: Cybersecurity Webinar Series - Ransomware is Alive and ...€¦ · 1. Assessing Your Biggest Security Risks Before It Is Too Late –October 29 th 2. Machine Learning and the Latest

© 2020 Jack Henry & Associates, Inc.®2

Cybersecurity Webinar Series

• Multi-part, educational series• Proactive Cybersecurity: Staying Ahead of Threats

1. Assessing Your Biggest Security Risks Before It Is Too Late – October 29th

2. Machine Learning and the Latest Protection methods – December 12th

3. Cyber Threats and Trends for 2020 – January 14th

4. Ransomware is alive and well: are you? – February 12th

5. Gone Phishing: Tips, Tricks and Lessons Learned in the Battle of Social Engineering – March 18th

6. Unleashing the true value of GRC - April 29th

Page 3: Cybersecurity Webinar Series - Ransomware is Alive and ...€¦ · 1. Assessing Your Biggest Security Risks Before It Is Too Late –October 29 th 2. Machine Learning and the Latest

© 2020 Jack Henry & Associates, Inc.®3

Malware Landscape

Page 4: Cybersecurity Webinar Series - Ransomware is Alive and ...€¦ · 1. Assessing Your Biggest Security Risks Before It Is Too Late –October 29 th 2. Machine Learning and the Latest

© 2020 Jack Henry & Associates, Inc.®4

Landscape

Page 5: Cybersecurity Webinar Series - Ransomware is Alive and ...€¦ · 1. Assessing Your Biggest Security Risks Before It Is Too Late –October 29 th 2. Machine Learning and the Latest

© 2020 Jack Henry & Associates, Inc.®5

Why Are Attacks More Effective? Available Data

16 Billion

Page 6: Cybersecurity Webinar Series - Ransomware is Alive and ...€¦ · 1. Assessing Your Biggest Security Risks Before It Is Too Late –October 29 th 2. Machine Learning and the Latest

© 2020 Jack Henry & Associates, Inc.®6

Why Are Attacks More Effective? Revenue

Page 7: Cybersecurity Webinar Series - Ransomware is Alive and ...€¦ · 1. Assessing Your Biggest Security Risks Before It Is Too Late –October 29 th 2. Machine Learning and the Latest

© 2020 Jack Henry & Associates, Inc.®7

Page 8: Cybersecurity Webinar Series - Ransomware is Alive and ...€¦ · 1. Assessing Your Biggest Security Risks Before It Is Too Late –October 29 th 2. Machine Learning and the Latest

© 2020 Jack Henry & Associates, Inc.®8

Page 9: Cybersecurity Webinar Series - Ransomware is Alive and ...€¦ · 1. Assessing Your Biggest Security Risks Before It Is Too Late –October 29 th 2. Machine Learning and the Latest

© 2020 Jack Henry & Associates, Inc.®9

Chinese/North Korean Government Hacking Group

Page 10: Cybersecurity Webinar Series - Ransomware is Alive and ...€¦ · 1. Assessing Your Biggest Security Risks Before It Is Too Late –October 29 th 2. Machine Learning and the Latest

© 2020 Jack Henry & Associates, Inc.®10

The Anatomy of a Phishing Attack

Page 11: Cybersecurity Webinar Series - Ransomware is Alive and ...€¦ · 1. Assessing Your Biggest Security Risks Before It Is Too Late –October 29 th 2. Machine Learning and the Latest

© 2020 Jack Henry & Associates, Inc.®11

Page 12: Cybersecurity Webinar Series - Ransomware is Alive and ...€¦ · 1. Assessing Your Biggest Security Risks Before It Is Too Late –October 29 th 2. Machine Learning and the Latest

© 2020 Jack Henry & Associates, Inc.®12

Example.com213.48.212.85

Blacklist Service183.88.245.11

IP Lookup183.88.245.11

Page 13: Cybersecurity Webinar Series - Ransomware is Alive and ...€¦ · 1. Assessing Your Biggest Security Risks Before It Is Too Late –October 29 th 2. Machine Learning and the Latest

© 2020 Jack Henry & Associates, Inc.®13

Email Spoofing Pivots to Look-alike Domains

Stickleyonsecurity.com namewest.com/simple-typo

sticklyeonsecurity.comstickleoynsecurity.comstickleynosecurity.comstickleyosnecurity.comstickleyonescurity.comstickleyonsceurity.comstickleyonseucrity.comstickleyonsecruity.comstickleyonsecuirty.comstickleyonsecurtiy.com

stickleyonseucrity.com

1. Identify Target2. Purchase look-alike domain3. Follow all proper domain registration

processes including DMARC4. Park the domain for a couple months

to appear to be legitimate5. Research Target to determine who

will be impersonated6. Purchase email list of Target

employees7. Launch

Page 14: Cybersecurity Webinar Series - Ransomware is Alive and ...€¦ · 1. Assessing Your Biggest Security Risks Before It Is Too Late –October 29 th 2. Machine Learning and the Latest

© 2020 Jack Henry & Associates, Inc.®14

Page 15: Cybersecurity Webinar Series - Ransomware is Alive and ...€¦ · 1. Assessing Your Biggest Security Risks Before It Is Too Late –October 29 th 2. Machine Learning and the Latest

© 2020 Jack Henry & Associates, Inc.®15

Page 16: Cybersecurity Webinar Series - Ransomware is Alive and ...€¦ · 1. Assessing Your Biggest Security Risks Before It Is Too Late –October 29 th 2. Machine Learning and the Latest

© 2020 Jack Henry & Associates, Inc.®16

Page 17: Cybersecurity Webinar Series - Ransomware is Alive and ...€¦ · 1. Assessing Your Biggest Security Risks Before It Is Too Late –October 29 th 2. Machine Learning and the Latest

© 2020 Jack Henry & Associates, Inc.®17

How to prepare, protect and prevent

Page 18: Cybersecurity Webinar Series - Ransomware is Alive and ...€¦ · 1. Assessing Your Biggest Security Risks Before It Is Too Late –October 29 th 2. Machine Learning and the Latest

© 2020 Jack Henry & Associates, Inc.®18

Event Action Plan: Preparedness

1. Incident Response Plan2. Business Continuity Plan3. Failover Plan4. Backup Strategy

1. Ransomware, Data Breach

2. How do we keep serving

3. How are we going to recover

4. What will be the data gap

Page 19: Cybersecurity Webinar Series - Ransomware is Alive and ...€¦ · 1. Assessing Your Biggest Security Risks Before It Is Too Late –October 29 th 2. Machine Learning and the Latest

© 2020 Jack Henry & Associates, Inc.®19

Prevention Action Plan: Layered Security1. Infrastructure (firewall, email filter, anti-virus,

cloud backup, etc.)

2. Outside Email Warning Messages3. Domain Security (lock down look-alike and

typosquatting domains)

4. Employee Education that keeps pace with the evolving threat landscape

5. Phishing Simulation

Employee Training Methods

Annual or Quarterly Phishing only14-24% Click Rate

Monthly Phishing8-14% Click Rate

Monthly Phishing with Quarterly Education0-5% Click Rate

Page 20: Cybersecurity Webinar Series - Ransomware is Alive and ...€¦ · 1. Assessing Your Biggest Security Risks Before It Is Too Late –October 29 th 2. Machine Learning and the Latest

© 2020 Jack Henry & Associates, Inc.®20

Gladiator® Security Services

• Centurion Disaster Recovery• Disk to disk to cloud backup and recovery

• Gladiator Hosted Network Solutions• Virtual Desktop Infrastructure (VDI)• Disaster Avoidance services

• Gladiator Total Protect Suite• New advanced SIEM / SOAR• Machine Learning, Predictive & Prescriptive Analytics• Enhanced Threat Intel Platform, built solely for FI’s• IT Regulatory Compliance solutions

Page 21: Cybersecurity Webinar Series - Ransomware is Alive and ...€¦ · 1. Assessing Your Biggest Security Risks Before It Is Too Late –October 29 th 2. Machine Learning and the Latest

© 2020 Jack Henry & Associates, Inc.®21

Thank You

Rick PhillipsStickley on [email protected]

• Employee Education• Phishing Simulation• Domain Security• Automated Security Center

Viviana Campanaro, [email protected]

mailto:[email protected]
mailto:[email protected]

Understanding Ransomware: Impact, Evolution and Defensive ...€¦ · 14/07/2014  · 3 Evolution of Ransomware 3.1 Historic Examples of Ransomware Ransomware trojans appeared as

Understanding Ransomware: Impact, Evolution and Defensive ...€¦ · 14/07/2014  · 3 Evolution of Ransomware 3.1 Historic Examples of Ransomware Ransomware trojans appeared as

Malwarebytes Anti-Ransomware Administrator Guide · Malwarebytes Anti-Ransomware Administrator Guide 1 What is Ransomware? In the simplest terms, the name ransomware says it all.

Malwarebytes Anti-Ransomware Administrator Guide · Malwarebytes Anti-Ransomware Administrator Guide 1 What is Ransomware? In the simplest terms, the name ransomware says it all.

DATA SCIENCE OR BLACK MAGIC – CYBERSECURITY THREATS … · RANSOMWARE, BITCOIN MINING IS THE NEW BLACK* 3 Low cost + easy money = perfect storm What everyone is seeing ü Ransomware

DATA SCIENCE OR BLACK MAGIC – CYBERSECURITY THREATS … · RANSOMWARE, BITCOIN MINING IS THE NEW BLACK* 3 Low cost + easy money = perfect storm What everyone is seeing ü Ransomware

Easy way to uninstall PadCrypt ransomware: Remove PadCrypt ransomware

Easy way to uninstall PadCrypt ransomware: Remove PadCrypt ransomware

RANSOMWARE PROTECTION & CYBERSECURITY FOR SMALL …

RANSOMWARE PROTECTION & CYBERSECURITY FOR SMALL …

Phishing and Ransomware · 2019-12-05 · Cybersecurity: Phishing and Ransomware . Douglas Jones, City Auditor, City of Kansas City . Amanda Noble, City Auditor, City of Atlanta .

Phishing and Ransomware · 2019-12-05 · Cybersecurity: Phishing and Ransomware . Douglas Jones, City Auditor, City of Kansas City . Amanda Noble, City Auditor, City of Atlanta .

THE EVOLUTION OF RANSOMWARE: HOW TO PROTECT … · In fact, ransomware is one of the fastest growing threats in cybersecurity, with damages predicted to build to $20 billion globally

THE EVOLUTION OF RANSOMWARE: HOW TO PROTECT … · In fact, ransomware is one of the fastest growing threats in cybersecurity, with damages predicted to build to $20 billion globally

Data Privacy and Cybersecurity for Tax Professionals · • Identify and protect high-risk data. • Recognize the signs of phishing, spear-phishing, ransomware, malware, and other

Data Privacy and Cybersecurity for Tax Professionals · • Identify and protect high-risk data. • Recognize the signs of phishing, spear-phishing, ransomware, malware, and other

Ransomware: Modern Day PiratesRansomware • What is ransomware • History of ransomware • Actors and their motivations • Anatomy of a ransomware attack • Cost of a ransomware

Ransomware: Modern Day PiratesRansomware • What is ransomware • History of ransomware • Actors and their motivations • Anatomy of a ransomware attack • Cost of a ransomware

Strategy for Developing Cybersecurity Workforce in CSTEC · Adopting NCWF to Android Ransomware Response Course [1] Investigates, analyzes, and responds to cyber incidents within

Strategy for Developing Cybersecurity Workforce in CSTEC · Adopting NCWF to Android Ransomware Response Course [1] Investigates, analyzes, and responds to cyber incidents within

DATA INTEGRITY - NCCoE · DATA INTEGRITY Identifying and Protecting Assets Against Ransomware and Other Destructive Events Tim McBride National Cybersecurity Center of Excellence

DATA INTEGRITY - NCCoE · DATA INTEGRITY Identifying and Protecting Assets Against Ransomware and Other Destructive Events Tim McBride National Cybersecurity Center of Excellence

Cybersecurity Cybersecurity for for Hedge Funds fund managers … · 2019-12-17 · By James Williams 17 How to recover from a ransomware attack Interview with Warren Finkel, ACE

Cybersecurity Cybersecurity for for Hedge Funds fund managers … · 2019-12-17 · By James Williams 17 How to recover from a ransomware attack Interview with Warren Finkel, ACE

Monthly Cybersecurity Newsletter - North Carolinafiles.nc.gov/ncdit/documents/cybersecurity_newsletters/2018/ESRMO Newsletter...drive-by downloads to infect a system, ransomware like

Monthly Cybersecurity Newsletter - North Carolinafiles.nc.gov/ncdit/documents/cybersecurity_newsletters/2018/ESRMO Newsletter...drive-by downloads to infect a system, ransomware like

Your Money or Your PHI: Ransomware in the Healthcare Industry€¦ ·  · 2016-11-16Your Money or Your PHI: Ransomware in the Healthcare Industry ... medical staff) Immature Cybersecurity

Your Money or Your PHI: Ransomware in the Healthcare Industry€¦ ·  · 2016-11-16Your Money or Your PHI: Ransomware in the Healthcare Industry ... medical staff) Immature Cybersecurity

Reputation Resilience Assessment...b. Cybersecurity is often interpreted to include resilience to threats to a systems integrity (denial of service, ransomware, system collapse) and

Reputation Resilience Assessment...b. Cybersecurity is often interpreted to include resilience to threats to a systems integrity (denial of service, ransomware, system collapse) and

PRATT’S PRIVACY & CYBERSECURITY LAW · THE RISE AND EFFECT OF RANSOMWARE Ransomware is escalating alarmingly across industries. The FTC estimates that the number of ransomware attacks

PRATT’S PRIVACY & CYBERSECURITY LAW · THE RISE AND EFFECT OF RANSOMWARE Ransomware is escalating alarmingly across industries. The FTC estimates that the number of ransomware attacks

Cybersecurity Tips and Best Practices€¦ · Ransomware Attack Threats • Fastest growing malware threat for all users on all types of computers • Multiple types of ransomware

Cybersecurity Tips and Best Practices€¦ · Ransomware Attack Threats • Fastest growing malware threat for all users on all types of computers • Multiple types of ransomware

American Public Power Association’s Cybersecurity Services ... · and managing (RMM) software. Actors behind the Sodinokibi ransomware infection likely leveraged compromised network

American Public Power Association’s Cybersecurity Services ... · and managing (RMM) software. Actors behind the Sodinokibi ransomware infection likely leveraged compromised network

Ransomware and tips to prevent ransomware attacks

Ransomware and tips to prevent ransomware attacks

JOINT CYBERSECURITY ADVISORYdhhs.ne.gov/Documents/AA20-302A Joint Cybersecurity...TLP:WHITE WHITE TLP:WHITE JOINT CYBERSECURITY ADVISORY Ransomware Activity Targeting the Healthcare

JOINT CYBERSECURITY ADVISORYdhhs.ne.gov/Documents/AA20-302A Joint Cybersecurity...TLP:WHITE WHITE TLP:WHITE JOINT CYBERSECURITY ADVISORY Ransomware Activity Targeting the Healthcare