An update : https://www.fujifilm.com/jp/en/news/hq/6642#
Ransomware – Unauthorized access to Fujifilm servers
21–30 of 51 posts
Re: Ransomware – Unauthorized access to Fujifilm servers
#22Hmm but why target such a well known company? It's almost guaranteed that they will not pay to save face, no?
Companies these days just “contract external security consultant” for exact amount of ransom + fees aka ask the perp for a receipt for tax purposes
Re: Ransomware – Unauthorized access to Fujifilm servers
#23Re: Ransomware – Unauthorized access to Fujifilm servers
#24I'm the only person in my company with any IT knowledge. I'm a developer, not an IT expert. These stories terrify me. I have no mandate or time to work on our security.
What would you do to protect your company. I have limited backups but we would be done with systems down for days.
Re: Ransomware – Unauthorized access to Fujifilm servers
#25I'm the only person in my company with any IT knowledge. I'm a developer, not an IT expert. These stories terrify me. I have no mandate or time to work on our security. What would you do to protect your company. I have limited backups but we would be done with systems down for days.
Please note that backups aren't a good measure against ransomware, unless you do them absolutely correctly.
The problem is that ransomware will encrypt your files, rendering them useless, but they still end up in encrypted form in your backup.
Re: Ransomware – Unauthorized access to Fujifilm servers
#26I'm the only person in my company with any IT knowledge. I'm a developer, not an IT expert. These stories terrify me. I have no mandate or time to work on our security. What would you do to protect your company. I have limited backups but we would be done with systems down for days.
Report this to your manager and make it clear (using reports from cases, such as those ransomware cases) that you need to invest right away in security and a backup process you trust.
Re: Ransomware – Unauthorized access to Fujifilm servers
#27I'm the only person in my company with any IT knowledge. I'm a developer, not an IT expert. These stories terrify me. I have no mandate or time to work on our security. What would you do to protect your company. I have limited backups but we would be done with systems down for days.
Identify data assets that are important to you and back them up and work out recovery objectives in advance. This may sound complicated at first but follow this to get you started:
https://docs.borgbase.com/strategy/
Also a tool like borg [1] will help you ‘do backups right’. If you’re on Windows maybe checkout restic [2].
Next, make sure you patch software as unpatched software may contain vulnerabilities which can be exploited by a threat actor. Quicker is better and automating this allows audit, consistency, and expediency.
If you’re on MacOS check out RansomWhere from objective-see : https://objective-see.com/products/ransomwhere.html
Educate users so they are aware of the risks of opening emails from people they do not know and how to identify potential phishing.
Various anti malware/anti virus software can be used in conjunction with the above but cannot be relied on by itself - defence in depth.
Also you shouldn’t feel this is all your responsibility. Try and raise this business risk with the powers that be. See if you can not only get a company mandate but also maybe obtain someone with more expertise?
Re: Ransomware – Unauthorized access to Fujifilm servers
#28Earlier quoted context omitted.
I wonder how many times ransomware has gotten into Google/Amazon's employees laptops? Having 100k employees, most of whom have admin access to their own machines (cos developer) has got to make it almost impossible to stop it happening.
I have a friend who works at G that told me shortly after he started working there, he accidentally typed some portion of his password into another website, at which point his laptop immediately locked down and he was forced to change his password before doing anything else.
Are you implying Google had his password stored in reversible form?
Re: Ransomware – Unauthorized access to Fujifilm servers
#29I'm the only person in my company with any IT knowledge. I'm a developer, not an IT expert. These stories terrify me. I have no mandate or time to work on our security. What would you do to protect your company. I have limited backups but we would be done with systems down for days.
I suppose the best is to outsource, we have such offers in one of my businesses for example: https://yourlabs.org/secops/
Re: Ransomware – Unauthorized access to Fujifilm servers
#30I'm the only person in my company with any IT knowledge. I'm a developer, not an IT expert. These stories terrify me. I have no mandate or time to work on our security. What would you do to protect your company. I have limited backups but we would be done with systems down for days.
Report this to your manager and make it clear (using reports from cases, such as those ransomware cases) that you need to invest right away in security and a backup process you trust.
[deleted]