In the first part of our Ransomware Kill Chain series we looked at the anatomy and the associated risks of a ransomware attack. As a business you have gained insight into a form of attack that significantly deviates from a conventional cyberattack and caused quite a stir in the past, especially in the global media. Wanna Cry, NotPetya, and Jaff are notable examples of recent ransomware attacks.
When it comes to Wanna Cry, the damage was severe. Even the ‘Deutsche Bahn’ was affected by Wanna Cry´s ransomware attack. The exploit External Blue SMB served as a gateway for the attack. Even though the vulnerability was closed by a patch (Microsoft) and made available for download, there are still many businesses that have not yet implemented the vulnerability patch.
If companies fail to close these security gaps they will continue to be a potential victim of cybercrime. Below, we’ll show you how to use the Ransomware Kill Chain to take countermeasures against this type of attack.