Join | Member Login
Arlington (VA) Chamber of Commerce | Arlington, VA 22201
  • Membership
    • Membership Benefits
    • Join Now!
    • Chamber Assisted Grand Openings
    • Chamber Member Retirement Program
    • ShopChamber
    • Advertising >
      • Website Ads
      • E-Newsletter Ads
      • Print Ads
    • Committees
    • LeadShare
    • Annual Corporate Sponsors
    • Member Login
  • Business Directory
  • Events
    • Chamber Calendar
    • Community Calendar >
      • Submit a Community Event
    • Networking Events >
      • Chamber 101
      • Breakfast Connection
      • Business After Business
    • Signature Events >
      • Arlington Business Gala
      • Hospitality Awards
      • Legislative Breakfast
      • Arlington Chamber Volunteer Day
      • AWE Women in Business Summit
      • Best Business Awards
      • State of the County & Public Safety Awards
      • Annual Meeting
    • Educational Events
    • Women in Business
    • Travel
    • Online Learning Center
    • COVID-19 Event Policy
  • Community
    • Arlington Restaurant Week
    • Small Business Accelerator
    • Early Childhood Financial Resiliency Accelerator
    • Coronavirus Resources
    • Coupons
    • Job Board
    • Scholarship Fund
    • About Arlington >
      • Business Resources
      • Map of the Area
      • Visiting Arlington
  • Business Advocacy
    • Public Policy Positions
    • Arlington Advocacy >
      • Budget & Taxes
      • Planning
      • Project Support
      • Economic Development
      • Processes
      • Retail & Signage
      • Transportation
    • Virginia Advocacy >
      • Budget & Taxes
      • Transportation
      • Economic Development
      • Other Topics
    • Recent Advocacy
  • About the Chamber
    • Board of Directors
    • Staff Directory
    • Chamber in the News
    • Strategic Plan
    • FAQs
    • Blog
    • Publications >
      • Arlingtonian Archives
      • Arlingtonian Archives
    • Press Releases
    • Contact Us
  • Membership
    • Membership Benefits
    • Join Now!
    • Chamber Assisted Grand Openings
    • Chamber Member Retirement Program
    • ShopChamber
    • Advertising >
      • Website Ads
      • E-Newsletter Ads
      • Print Ads
    • Committees
    • LeadShare
    • Annual Corporate Sponsors
    • Member Login
  • Business Directory
  • Events
    • Chamber Calendar
    • Community Calendar >
      • Submit a Community Event
    • Networking Events >
      • Chamber 101
      • Breakfast Connection
      • Business After Business
    • Signature Events >
      • Arlington Business Gala
      • Hospitality Awards
      • Legislative Breakfast
      • Arlington Chamber Volunteer Day
      • AWE Women in Business Summit
      • Best Business Awards
      • State of the County & Public Safety Awards
      • Annual Meeting
    • Educational Events
    • Women in Business
    • Travel
    • Online Learning Center
    • COVID-19 Event Policy
  • Community
    • Arlington Restaurant Week
    • Small Business Accelerator
    • Early Childhood Financial Resiliency Accelerator
    • Coronavirus Resources
    • Coupons
    • Job Board
    • Scholarship Fund
    • About Arlington >
      • Business Resources
      • Map of the Area
      • Visiting Arlington
  • Business Advocacy
    • Public Policy Positions
    • Arlington Advocacy >
      • Budget & Taxes
      • Planning
      • Project Support
      • Economic Development
      • Processes
      • Retail & Signage
      • Transportation
    • Virginia Advocacy >
      • Budget & Taxes
      • Transportation
      • Economic Development
      • Other Topics
    • Recent Advocacy
  • About the Chamber
    • Board of Directors
    • Staff Directory
    • Chamber in the News
    • Strategic Plan
    • FAQs
    • Blog
    • Publications >
      • Arlingtonian Archives
      • Arlingtonian Archives
    • Press Releases
    • Contact Us

ChAmber Blog

The Ransomware Pandemic that COVID Started

9/15/2021

0 Comments

 
Picture
By Kurtis Minder, CEO, GroupSense
​

During the pandemic a parallel threat began permeating, driven partially by COVID itself. Ransomware attacks have increased exponentially over the last year and a half, impacting businesses of every size and profile. Yet, many companies believe it won’t happen to their business. For every Colonial Pipeline on the news there are thousands of small-to-medium enterprises impacted. Many of these go unreported.

Ransomware is not new. Some of the earliest iterations of ransomware attacks occurred as far back as the 1980s, using floppy disks and money orders. In the early 2000s it shifted to internet-based attacks and gift cards. Ransomware evolved and accelerated around 2010 with the advent of cryptocurrency. This afforded the attackers ease of transacting, anonymity, and was devoid of regulatory oversight. As ransoms went up, the frequency of attacks also increased. The latest surge has been impacted by the reduced sophistication required to carry out attacks, and the COVID remote work model. Because of this, remote workers will be the main target of cybercriminals throughout 2021 (Security Magazine, 2020.)
 
Today, Executing ransomware requires very little technical aptitude. A would-be attacker only needs the capability to access the dark web, where one can buy stolen network access from any number of businesses and then license ransomware deployment capability from Ransomware-as-a-Service platforms. The attack surface of victims is also plentiful, as many companies set-up remote access to provide systems connectivity to remote workers without proper security controls.
 
As a ransomware negotiator, I have had the bittersweet job of being in the middle of these attacks. My team and I are brought in post-attack to help businesses assess the business impact and understand the adversary, so that the impacted business can decide whether to engage with the ransomware operator. Should the business decide to do so, myself and my team act as a liaison, assisting with the negotiation, compliance, and settlement. While we have worked with some of the largest, newsworthy companies, it is the small-to-medium enterprises that concern me the most, as those businesses’ ability to recover from the operational, public relations, and breach fines are minimal.
 
No matter the size of your organization, ransomware is a threat that should be taken seriously. For example, in 2019, nearly 56% of organizations across multiple industries reported a ransomware attack (CISO Magazine). The time and resources spent focused on prevention and response, will pay back dividends when the unfortunate event occurs.
 
We have taken inventory of how the threat actors gain access in each of our cases and unsurprisingly it can be distilled down to a short list of cyber hygiene items. Chief among them, are securing remote access and better password and corporate credential policy. The majority of successful attacks are reused corporate credentials and passwords found on the dark web, and used to login to the remote access systems. Simply shutting off or securing Remote Desktop Protocol (RDP), Virtual Private Networking (VPN) devices, enforcing a strict password and credential policy, and enabling Multi-Factor Authentication (MFA) wherever supported, will significantly reduce the risk of becoming a victim. Monitoring dark web activity for your business’ critical data and intellectual property is a good measure, too.
 
When an attack is successful it can be a very chaotic experience. Systems are down, staff cannot login, email is inaccessible. We have found that most companies, even those who have documented incident response plans, are not fully prepared for the impact of a ransomware event. While traditional incident response plays a role in a ransomware event, there are many attributes that are unique to this kind of attack. The operational disruption, loss of revenue due to downed systems, inability to invoice, pay employees, etc., creates an atmosphere of panic and haste.
 
Do not.
First, do not attempt to repair, rename files or shut down systems, as this activity can often corrupt the encrypted files. Do not attempt to contact the threat actor directly. This should only be done when the business decision has been made to proceed with engagement and negotiation.
 
Do.
Use a professional negotiator. Traditional incident response should be enacted immediately to ensure the threat actors no longer have access to the network.
 
Having a documented process in advance of the attack will ease the navigation of the event. In addition to traditional incident response items, typically technical in nature, a ransomware response plan requires significant business process documentation. These would include a decision team, a team lead, financial stakeholders (who is going to approve the wire to the crypto broker?), technical leadership who can assess the impact and whether systems can be restored in a timely manner, legal counsel for breach notification, and so on.
 
Prevention, and preparation will go miles to mitigating and easing the impact of a ransomware attack. For reference, you can obtain our ransomware negotiation guide here https://www.groupsense.io/ransomware-negotiation-guide. For guidance on ransomware look at the CISA ransomware information site https://www.cisa.gov/stopransomware or talk to your external breach counsel.
0 Comments

Your comment will be posted after it is approved.


Leave a Reply.

    The mission of the Arlington Chamber of Commerce is to strengthen businesses and the economic environment for those who work, live and do business in Arlington.
    Picture
    Contribute to the blog!
    Educate the Chamber membership and Arlington business community by writing a post for our blog! To get started download the blog guidelines and blog template. For questions and more information, contact the Communications Manager.

    Archives

    March 2023
    February 2023
    January 2023
    December 2022
    November 2022
    October 2022
    September 2022
    August 2022
    July 2022
    June 2022
    May 2022
    April 2022
    March 2022
    February 2022
    January 2022
    December 2021
    November 2021
    October 2021
    September 2021
    August 2021
    July 2021
    June 2021
    May 2021
    April 2021
    March 2021
    February 2021
    January 2021
    December 2020
    November 2020
    October 2020
    September 2020
    August 2020
    July 2020
    June 2020
    May 2020
    April 2020
    March 2020
    February 2020
    January 2020
    December 2019
    November 2019
    October 2019
    September 2019
    August 2019
    July 2019
    June 2019
    May 2019
    April 2019
    March 2019
    February 2019
    January 2019
    December 2018
    November 2018
    October 2018
    September 2018
    August 2018
    July 2018
    June 2018
    May 2018
    April 2018
    March 2018
    February 2018
    January 2018
    December 2017
    November 2017
    October 2017
    September 2017
    August 2017
    July 2017
    June 2017
    May 2017
    April 2017
    March 2017
    February 2017
    January 2017
    December 2016
    November 2016
    October 2016
    September 2016
    August 2016
    July 2016
    June 2016
    May 2016
    April 2016
    March 2016
    February 2016
    January 2016
    December 2015
    November 2015
    October 2015
    September 2015
    August 2015
    July 2015
    June 2015
    May 2015
    April 2015
    March 2015
    February 2015
    January 2015
    December 2014
    November 2014
    October 2014
    September 2014
    August 2014
    July 2014
    June 2014
    May 2014
    April 2014
    March 2014
    February 2014
    January 2014
    December 2013
    November 2013
    October 2013
    September 2013
    August 2013
    July 2013
    June 2013
    May 2013
    April 2013

    RSS Feed

© Copyright 2023 Arlington Chamber of Commerce. All rights reserved.
2009 14th Street, North  | Suite 100 | Arlington, VA 22201 | Directions
Tel (703) 525-2400 | chamber@arlingtonchamber.org
MemberClicks
Subscribe to This Week At Your Chamber
For Email Marketing you can trust.
Home | ​Join Now | Site Map