Ransomware Prevention, Detection, and Simulation

Learn about the evolving ransomware landscape, including how attackers operate, the roles within the ransomware economy, and actionable strategies to strengthen your defenses.

Since 100% prevention is impossible, ransomware defense hinges on early detection. The article shows how BAS as a service, purple teaming, and baselining expose detection gaps in the kill chain.

A ransomware resilience primer covering RaaS growth, targeting of VPN and remote access entry points, OT networks hit in 41% of attacks, and attackers disabling backup capabilities to force payment.

Making its debut in 2018, the Ryuk ransomware strand has wreaked havoc on hundreds of businesses and is responsible for one-third of all ransomware attacks that took place in 2020.

Lessons from NetSPI's cloud attack simulations: default cloud logging alone is insufficient, SIEM rules need tuning, and breach and attack simulation (BAS) helps validate detective controls in Azure.

Part two of Wiz's Linux rootkit series: how loadable kernel modules (LKMs) work, how threat actors like TeamTNT and Winnti abuse them in the wild, and how to detect kernel-space rootkits.