Kevin BeaumontKonto zweryfikowane

Is it though? The same infection vectors of 10-15 years ago still work today.

Yes, but companies are having to do something about it now

I guess so, it’s just difficult comparing to something like nimda and wondering “what’s different?”. Impact of IT failure perhaps?

Messages on screen, user can't open their Capex document.

So that’s the factor, total lock out. Older worms put messages on screen but could work past them. Infosec will need to get better…

I think the bigger issue is people will need to start following our recommendations re: separation, whitelisting and monitoring/detection.

In my humble charlatan's opinion, most of what we see can be stopped with network segmentation, app/network whitelisting and current tools

100% of the investigations I've done post-compromise have supported that they could have been detected by existing tech and tools.