Ransomware as a Disruptive Weapon: LockerGoga and the Norsk Hydro Incident

Ransomware as a Disruptive Weapon: LockerGoga and the Norsk Hydro Incident

Dragos: ICS Cybersecurity via YouTube Direct link

Defense and Detection

36 of 38

36 of 38

Defense and Detection

Class Central Classrooms beta

YouTube videos curated by Class Central.

Classroom Contents

Ransomware as a Disruptive Weapon: LockerGoga and the Norsk Hydro Incident

Automatically move to the next video in the Classroom when playback concludes

  1. 1 Intro
  2. 2 Origins
  3. 3 WHOAMI
  4. 4 Agenda
  5. 5 Ransomware Defined
  6. 6 Older than You Think
  7. 7 Ransomware Evolution
  8. 8 Major Shifts in Behavior
  9. 9 LockerGoga Behavior
  10. 10 LockerGoga Sequencing
  11. 11 LockerGoga Intrusion
  12. 12 Assessment: Ransomware
  13. 13 Norsk Hydro Incident
  14. 14 LockerGoga at Hydro
  15. 15 Initial Suspicions
  16. 16 Curious Functionality
  17. 17 Odd Timing
  18. 18 Different Intrusion Path
  19. 19 LockerGoga & FING
  20. 20 Related Events?
  21. 21 Coordinated Event?
  22. 22 And Then...
  23. 23 LockerGoga "Development"
  24. 24 LockerGoga Timeline
  25. 25 Intention and Purpose
  26. 26 Ransomware as Wiper
  27. 27 NotPetya as Wiper
  28. 28 NotPetya Failures
  29. 29 Revising NotPetya
  30. 30 Ransomware as Cyberweapon
  31. 31 Benefit of Ransomware-Wiper
  32. 32 Impacts on Reporting, Sharing
  33. 33 Reporting & State Intervention
  34. 34 Insurance and Incentives
  35. 35 Limitations of Method
  36. 36 Defense and Detection
  37. 37 References & Resources
  38. 38 White Paper Link

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.