When ransomware strikes
summary
A firsthand account describes a 2013 breach that encrypts every accessible file, spreads into synced Dropbox copies, and is resolved only after buying 500 Bitcoin ransom with help from an employee who mined crypto. Practical defenses include aggressive patching, disabling hidden extensions and restricting execution from email, partitioning access and creating an airlock kill switch to stop automated replication. Recovery requires mapping who touched what, avoiding blind restores because write-in-place encryption can corrupt backups, and running a dual path of forensics plus selective restores.
AI-written summary · about
chapters (6)
- 0:00Introduction to ransomware
- 3:14Personal ransomware experience
- 6:23Why ransomware matters
- 9:13Preventing ransomware attacks
- 12:02Recovery strategies after attack
- 19:10Planning for ransomware disasters
related talks
21mRansomware Attack: Lessons Learned
41mRansomware Incident Response - The Real-World Story of a Ransomware Attack
38mRansomware and Backups: A Multi-Layered Defense Strategy
14mIs a Ransomware Attack in your Future? How to Prevent an Attack
51mHow to secure your data and applications against ransomware
32mSurviving a Ransomware Attack - Lessons from the Field
27mRansomware: A database survival guide
54mExperience a simulated ransomware event: Learn now to prevail later