Ransomware: How One Company Fought Back
summary
Pitney Bowes experienced two major ransomware attacks over seven months and describes the attackers' methods, the security lessons learned, and the concrete elements needed for response. The talk covers improving protection, detection, and incident response capabilities based on that first‑hand experience.
AI-written summary · about
chapters (19)
- 0:00Start
- 2:08Anatomy of Attacks
- 4:11Is My Organization Prepared for Ransomware Attack
- 10:04Operational Downtime
- 12:29Second Impact Data Loss and Exposure
- 15:38Legal Regulatory Obligations
- 17:09Anatomy of the Attacks
- 17:44Important Learnings
- 20:12Credential Theft
- 20:55Network Segmentation
- 22:36Privilege Access Management
- 24:27Deleting Backups Disabling Security Protections
- 30:57Digital Disaster Recovery
- 34:47Ensure that You Have an Accurate Asset Inventory
- 41:49Top Five Things To Do in a Ransomware Attack
- 47:15Did You Set Up any out-of-Band Comms When You Know the Actor Is in Your Network
- 47:50Internal Communications
- 48:51Crisis Communications Playbooks and Frameworks
- 49:13The Attack Vectors Were through Fishing Were They Exactly the Same for both Attacks within Six Months or Did They Diverge
related talks
21mRansomware Attack: Lessons Learned
16mMy Firsthand Experience with Ransomware
38mRansomware and Backups: A Multi-Layered Defense Strategy
29mPrevention as a Business Strategy
20mWhen ransomware strikes
41mKidnapping a Library: How Ransomware Taught the British Library to... (Brian Myers)
41mRansomware Incident Response - The Real-World Story of a Ransomware Attack
40mA Review of the Ransomware Threat Landscape