Ransomware napad na tvrtku: sedam minuta, 55 000 uređaja

Dokumentarac prikazuje kako ransomware funkcionira iznutra: od krađe VPN lozinke i lateralnog kretanja mrežom do uništavanja sigurnosnih kopija i konačnog šifriranja. Na primjerima Maerska, Colonial Pipelinea i medicinskih klinika koje su trajno zatvorile vrata vidljivo je što napad znači za zaposlenike, pacijente i osiguratelje. Film završava pregledom pravnih akcija — od FBI-jevog povrata dijela otkupnine do operacije Cronos kojom je u veljači 2024. srušena infrastruktura LockBita. Poglavlja 00:00 Sedam minuta do mraka 02:28 Tvrtka kao meta: tko, koliko i zašto 06:13 Od diskete do industrije: kronologija 1989.–2020. 09:51 Kako funkcionira: od lozinke do zaključanog diska 14:52 Slučaj Maersk: deset dana bez broda 18:45 Colonial Pipeline: otkupnina plaćena, istraga počinje 23:37 Platiti ili ne platiti: tri ishoda, jedan obrazac 26:22 Tko plaća pravi račun: pacijenti, zaposlenici, osiguratelji 29:56 Što znamo, što ne znamo i kako tvrtke nastavljaju Izvori - Gavin Ashton (personal blog, gvnshtn.com) — Maersk, me & NotPetya.: https://gvnshtn.com/posts/maersk-me-notpetya/ - Microsoft Security Blog — New ransomware, old techniques: Petya adds worm capabilities: https://www.microsoft.com/en-us/security/blog/2017/06/27/new-ransomware-old-techniques-petya-adds-worm-capabilities/ - Computer Weekly — NotPetya offers industry-wide lessons, says Maersk's tech chief: https://www.computerweekly.com/news/252464773/NotPetya-offers-industry-wide-lessons-says-Maersks-tech-chief - Kordia (New Zealand IT firm blog) — The Maersk Cyber Attack: https://www.kordia.co.nz/news-and-views/the-maersk-cyber-attack - Kaspersky Lab (Securelist) — ExPetr/Petya/NotPetya is a Wiper, Not Ransomware: https://securelist.com/expetrpetyanotpetya-is-a-wiper-not-ransomware/78902/ - CISA (Cybersecurity and Infrastructure Security Agency), jointly with NSA, FBI, and MS-ISAC — #StopRansomware Guide: https://www.cisa.gov/stopransomware/ransomware-guide - CISA, jointly with NSA, FBI, and MS-ISAC — #StopRansomware Guide: https://www.cisa.gov/stopransomware/ransomware-guide - FBI Internet Crime Complaint Center (IC3) — 2024 Internet Crime Report: https://www.ic3.gov/AnnualReport/Reports/2024_IC3Report.pdf - FBI Internet Crime Complaint Center (IC3) — 2023 Internet Crime Report: https://www.ic3.gov/annualreport/reports/2023_ic3report.pdf - Chainalysis — Ransomware Payments Exceed $1 Billion in 2023, Hitting All-Time High After 2022 Decline: https://www.chainalysis.com/blog/ransomware-2024/ - Veeam — New Veeam Research Finds 93% of Cyber Attacks Target Backup Storage to Force Ransom Payment: https://www.veeam.com/company/press-release/new-veeam-research-finds-93-percent-of-cyber-attacks-target-backup-storage-to-force-ransom-payment.html - Varonis — A Brief History of Ransomware: https://www.varonis.com/blog/a-brief-history-of-ransomware - Smarter MSP — Tech Time Warp: History of the first case of ransomware: https://smartermsp.com/tech-time-warp-history-of-the-first-case-of-ransomware/ - Sophos — CryptoLocker Ransomware Threat Analysis: https://www.sophos.com/en-us/research/cryptolocker-ransomware - CrowdStrike — A Brief History of Ransomware [Including Attacks]: https://www.crowdstrike.com/en-us/cybersecurity-101/ransomware/history-of-ransomware/ - Krebs on Security — 'Operation Tovar' Targets 'Gameover' ZeuS Botnet, CryptoLocker Scourge: https://krebsonsecurity.com/2014/06/operation-tovar-targets-gameover-zeus-botnet-cryptolocker-scourge/ - Adaptive Security — WannaCry Ransomware Explained: How the 2017 Attack Spread, What It Really Cost, and Why It Still Matters in 2026: https://www.adaptivesecurity.com/blog/wannacry-ransomware - Al Jazeera — Ransomware attack hit 200,000 victims in 150 countries: https://www.aljazeera.com/news/2017/5/14/ransomware-attack-hit-200000-victims-in-150-countries - Bitdefender — Good riddance, GandCrab! We're still fixing the mess you left behind.: https://www.bitdefender.com/en-gb/blog/labs/good-riddance-gandcrab-were-still-fixing-the-mess-you-left-behind - Proofpoint — What Is Ransomware as a Service (RaaS)?: https://www.proofpoint.com/us/threat-reference/ransomware-as-a-service-raas - Adaptive Security — GandCrab Ransomware: Full Timeline, Decryption, and Attribution: https://www.adaptivesecurity.com/blog/gandcrab-ransomware-timeline - HIPAA Journal (reporting on Sophos 2023 Active Adversary Report) — Ransomware Groups are Accelerating Their Attacks with Dwell Time Falling to Just 5 Days: https://www.hipaajournal.com/ransomware-groups-dwell-time-5-days/ - Huntress — How Do Initial Access Brokers Enable Ransomware Attacks?: https://www.huntress.com/ransomware-guide/initial-access-brokers-ransomware - Zscaler — What Is Double Extortion Ransomware?: https://www.zscaler.com/resources/security-terms-glossary/what-is-double-extortion-ransomware - … Napomene - Naracija: sintetski (AI) glas. Glazba: originalna, sintetizirana za ovaj video. - Sheme su pojednostavljeni prikazi. #dokumentarac #kibernetičkaSigurnost #ransomware

Pogledaj na YouTubeu