Livia Tibirna’s Post

Excellent ransomware paper from Sekoia.io. Thanks to Livia Tibirna and Caroline LEWIS, the 'exfiltration' methods are now uncovered, providing new ways to detect this critical final activity of any double-extortion ransomware attack. My favorite was the screenshot on Page #10, where negotiation was made possible, depending on the 'services' offered by the adversary.

Very interesting graphic. Notice the frequency of using legitimate tools. This is why traditional defensive measures such as EDR can struggle to stop ransomware events. How do you distinguish whether a legitimate tool is being abused for illegitimate purposes? What if a custom tool is used for legitimate purposes? As a Red Teamer I can tell you that using legitimate tooling to accomplish your aims can help you go far. This is why you need to pair traditional defenses with threat hunting, deception tech/tooling, and threat intelligence. There’s no one size fits all solution, so do your best to cover many bases and give yourself defense in depth

🚨 New CTI report: Ransomware-driven data exfiltration: techniques and implications Is your organisation facing the ransomware threat? (answer: yes) To understand how attackers collect, exfiltrate and leverage sensitive data, and enhance your company‘s security posture accordingly, Sekoia TDR has a new report for you 👇

23andMe's recent data breach is a stark reminder of the importance of data security. #socialmediamarketing #socialmediamanager #socialmediatips #socialmediagrowth #socialmediastrategist #onlinemarketing #socialmediasuccess #smallbusinessmarketing #smallbuisnessgrowth

DATA BREACH ALERT - Database of Unicorn Skincare allegedly leaked Threat actor claims to have obtained organization's database, which includes Students ID Cards, Selfies. - #data_breach #data_leak #infosec #dark_web #DataBreach  #DataLeak  #Services  #CyberThreat  #CyberAttack  #CyberRisk #ransomware #financial #data

🙅♂️ Confidence ≠ capability. 🙅♂️ 78% feel good about their #cyberresilience strategy, yet 67% have been hit by #ransomware in 2024. Confidence on paper means nothing if execution fails. Time to bridge the gap between intent and reality before it’s too late! Get the report: https://lnkd.in/dxdURveW #CybersecurityAwarenessMonth

Cybersecurity Awareness Month 🙅♂️ Confidence ≠ capability. 🙅♂️ 78% feel good about their #cyberresilience strategy, yet 67% have been hit by #ransomware in 2024. Confidence on paper means nothing if execution fails. Time to bridge the gap between intent and reality before it’s too late! Get the report: #CybersecurityAwarenessMonth

🙅♂️ Confidence ≠ capability. 🙅♂️ 78% feel good about their #cyberresilience strategy, yet 67% have been hit by #ransomware in 2024. Confidence on paper means nothing if execution fails. Time to bridge the gap between intent and reality before it’s too late! Get the report: https://lnkd.in/eW6sBbjy #CybersecurityAwarenessMonth

Cybersecurity Awareness Month 🙅♂️ Confidence ≠ capability. 🙅♂️ 78% feel good about their #cyberresilience strategy, yet 67% have been hit by #ransomware in 2024. Confidence on paper means nothing if execution fails. Time to bridge the gap between intent and reality before it’s too late! Get the report: #CybersecurityAwarenessMonth

🙅♂️ Confidence ≠ capability. 🙅♂️ 78% feel good about their #cyberresilience strategy, yet 67% have been hit by #ransomware in 2024. Confidence on paper means nothing if execution fails. Time to bridge the gap between intent and reality before it’s too late! Get the report: https://lnkd.in/ejX5McZa #CybersecurityAwarenessMonth