Learn about the evolution and impact of ransomware in this 30-minute conference talk from Converge 2018. Explore the origins of ransomware, from PC Cyborg to modern variants like Locky and CryptoWall. Understand how ransomware infections occur and examine analysis tools for different strains. Discover common threads among ransomware attacks and learn essential prevention strategies, including patching, backups, file integrity monitoring, endpoint process visibility, and security awareness training. Gain insights into the rise of Ransomware as a Service (RaaS) and how to protect against this growing threat.
Overview
Syllabus
Intro
What is Ransomware? (besides a pain)
How did we get here?
Origins of Ransomware - PC Cyborg
First "modern" ransomware - GPCoder
Locker variants - WinLock, Reveton
Modern Ransomware - Locky, CryptoWall, etc.
Ransomware as a Service (RaaS)
How Do Ransomware Infections Occur?
Analysis Tools
Cryptowall Background
Locky Background
TeslaCrypt Background
Common Threads
Patches, Backups, and File Integrity Monitoring
Endpoint Process Visibility
AppLocker, SRPs, Network Segmentation
Security Awareness Training
Email Extension Filters
