了解勒索软件生态系统：从屏幕锁到价值数百万美元的犯罪企业
Tenable Research 发布的新报告探讨了勒索软件生态系统中的关键玩家，以及助其从新网络威胁发展成为不容忽视力量所采用的手段。
勒索软件是一种不断演变的网络威胁，正是通过演变，勒索软件不仅得以生存，而且还“蓬勃发展”。
许多报告都详细描述了勒索软件的演变进程：从 1989 年被称为 AIDS（或 PC Cyborg）特洛伊木马的最早形式的勒索软件，过渡到屏幕锁勒索软件，以及最终演变为对系统上的文件进行加密的 cryptolocker 勒索软件。这种勒索软件成为现代勒索软件运作的基础。
屏幕锁勒索软件使用联邦调查局 (FBI) 和英国大都会警察局 (the Met) 的执法图像，以及声称受害者从其计算机访问了色情或虐待儿童内容的文本，对个人用户采用恐吓手段实施勒索。这些受害者要求支付“罚款”（金额通常在 100 到 500 美元之间）才能解锁他们的系统。实际而言，这些用户不用支付罚金就可以重新访问其系统，因为没有任何文件被篡改。
过去四年来，勒索软件已发展成一个价值数百万美元、自我维持的产业。在 2021 年针对 Colonial Pipeline 或 JBS Foods 等关键基础设施进行恶劣攻击后，勒索软件在企业日常运营中也是屡见不鲜。
图像来源： Security Boulevard
成就现今勒索软件大业的就是所谓的勒索软件生态系统。在最新的报告中，我们探讨了对勒索软件生态系统有重大影响的关键玩家，以及推动勒索软件成为当今企业最大威胁所采取的手段。
您可以通过此报告了解到：
- 深入了解勒索软件生态系统是如何演化的
- 该生态系统中的玩家最常使用的攻击向量
- 如何准备和防御勒索软件攻击的指导
- 在勒索软件攻击中可能遭利用的漏洞列表
获取更多信息
- 在此下载完整报告
- 参加网络研讨会：Tenable 勒索软件生态系统报告：了解主要玩家、常见攻击向量以及避免成为受害者的方法
- 关于勒索软件生态系统 Tenable.io 仪表盘的博文
- 关于勒索软件生态系统 Tenable.sc 仪表盘的博文
- 关于勒索软件生态系统 Tenable.sc 报告的博文
- 在 Tenable Community 上关注 Tenable 安全响应团队
相关文章
IDC Ranks Tenable No. 1 in Worldwide Device Vulnerability Management Market Share for the Fifth Consecutive Year
February 22, 2024The research firm’s latest report also provides market insights that security professionals can use to improve their vulnerability management strategy.
Pig Butchering Scam: From Tinder and TikTok to WhatsApp and Telegram, How Scammers Are Stealing Millions in a Long Con
February 14, 2024In part one of a two-part series on Pig butchering, we detail the pervasive scam that has impacted thousands of victims around the world, resulting in the loss of hundreds of millions of dollars. This blog highlights the who and the how of Pig butchering scams, and details the Pig butchering playbook.
Pig Butchering Scam: How Bitcoin, Ethereum, Litecoin and Spot Gold (XAUUSD) Investments Are Used in Romance Scams to Steal Hundreds of Millions
February 14, 2024This is the second part of a two-part series based on firsthand research into pig butchering scams from the end of 2022 into early 2024. In this post, we delve into the types of investment scams perpetrated by pig butchers to steal hundreds of millions of dollars from victims, including in the form of cryptocurrency and spot gold.
Cybersecurity Snapshot: U.S. Gov’t Unpacks AI Threat to Banks, as NCSC Urges OT Teams to Protect Cloud SCADA Systems
March 29, 2024Check out new guidance for banks on combating AI-boosted fraud. Plus, how to cut cyber risk when migrating SCADA systems to the cloud. Meanwhile, why CISA is fed up with SQLi flaws. And best practices to prevent and respond to DDoS attacks. And much more!
Enhancing Transportation Cybersecurity and Fleet Management for the DoD
March 25, 2024Few things can halt operations across the Department of Defense like a critical failure of logistics and transportation. From automated asset inventory to malicious-activity detections through baselining, learn how Tenable OT Security can protect these critical functions within the DoD and work towards the federal government’s zero trust mandate in OT environments.
Cybersecurity Snapshot: NSA Picks Top Cloud Security Practices, while CNCF Looks at How Cloud Native Can Facilitate AI Adoption
March 22, 2024Check out the NSA’s 10 key best practices for securing cloud environments. Plus, learn how cloud native computing could help streamline your AI deployments. Meanwhile, don’t miss the latest about cyberthreats against water treatment plants and critical infrastructure in general. And much more!
- Research Reports
- Vulnerability Management