Future ransomware will be scary-dangerous
Here is a scary prospect. Ransomware that hides in a corporate network, analyzing it and multiplying itself until it is found on every machine in an organization. Only after it has contaminated every machine in a network will it activate, in a coordinated attack, bringing an entire company’s business to a screeching halt, until a large sum of money is paid to the attacker.
Such an idea is not yet reality, but it’s not far from it, either. Cisco’s Midyear Cybersecurity Report says it is only a matter before we hit this milestone, mostly because ransomware has become the most lucrative malware type in history.
Also, businesses are ill-prepared for ransomware attacks. They have fragile infrastructure, poor network hygiene, and extremely slow detection rates. The report says that organizations take, on average, 200 days to identify a new threat. For attackers, the longer it takes to identify the threat, the more money they’ll be able to extract.
"Faster time to detection of threats is critical to constrain attackers’ operational space and minimize damage from intrusions", the company says, adding that Cisco’s median time to detection (TTD) is now approximately 13 hours, down from 17.5 last year.
And while organizations are struggling, attackers are shifting into a higher gear. Cisco advises all organizations to protect themselves by:
- Improving network hygiene
- Integrating defenses
- Measuring time to detection
- Protecting their users
- Backing up critical data
"As organizations capitalize on new business models presented by digital transformation, security is the critical foundation", says Marty Roesch, vice president and chief architect, Security Business Group, Cisco. "Attackers are going undetected and expanding their time to operate. To close the attackers’ windows of opportunity, customers will require more visibility into their networks and must improve activities, like patching and retiring aging infrastructure lacking in advanced security capabilities".
Published under license from ITProPortal.com, a Net Communities Ltd Publication. All rights reserved.
Photo credit: wsf-s / Shutterstock