My Admin’s Post

The 2023 FBI IC3 Report is out. Every year, I read this report to refresh my cybercrime knowledge and, most importantly, $$$ lost. $12.5bn lost in 2023. BEC - $2.9bn in 2023. Ransomware - $59.6m in 2023. Let those numbers sink in.

Ransomware: To Pay or Not to Pay... It's an important conversation for the C-Suite to have, especially when it comes to the use of public funds. This is a thoughtful read about the considerations and consequences of ransomware.

Is your network holding on by a thread? Don't add to the long list of recently affected big business names being brought down by cybercrime. Let Nuvera help assess your network's health! 💪 https://lnkd.in/gsyzsNra

Nonprofit executives must frequently steer their organization around challenges, including preventing financial loss. In the online ecosystem that we all share, fraud, privacy breaches, and #technology disruptions due to cyber-related incidents heighten your risk of financial losses. Read our August Executive Director Bulletin to learn about 501 Commons’ #cybersecurity training and educational resources so you can become better adept at protecting your #nonprofit from cybercrime. https://lnkd.in/gafGKfeW

⚠️ It's World Password Day 2024, so here's a reality check: ▪️ '123456', 'admin' or 'password' were the most common passwords in the U.S. in 2023 ▪️ It takes just five minutes to crack an 8-character password ▪️ Ransomware growth skyrocketed by 63% over in 2023 ▪️A staggering 44% of ransomware payouts amounted to $25,000-$99,999 in 2023, exposing personal information and lucrative data Read on for more tips to better secure your account ➡️ https://lnkd.in/gy8q3bkQ

Sadly, the crooks will now fix their bugs, but there are lessons for us all to learn from this. I explain how modern ransomware works (and why), what the criminals did wrong, and how to avoid making this sort of cryptographic blunder in your own work. Learn from the crooks so you don't leave your own software vulnerable to an end-run around your cryptographic code.

When did you last change your passwords? It's sometimes an uphill battle to avoid cybercrime, but there's a few simple things you can do to prevent it affecting your loved one: https://lnkd.in/gup-765S

Its another LockBit update!... 1. LockBit affiliates are actively exploiting ConnectWise's ScreenConnect critical vulnerability, deploying LockBit ransomware. What they are doing with the data when they steal it, and how they are negotiating with victims, is unclear. 2. Law enforcement released their info on Lockbit's admin, but I'll be honest, it's underwhelming (screenshot below)... The unmasking of the Lockbit subgroup National Hazard Agency admin, Bassterlord, has been far more effective and, to be honest, entertaining. 3. Based on what we can see, LockBit have still not restored any public facing infrastructure, and the longer this continues the better!! 4. We are surprised about the lack of movement among the LockBit affiliates. It appears, from what we can see of the major Russophonic darkweb communities, that despite many of them being quite pissed off, they havent yet indicated movement to a new RaaS. Given most of these folks are ex-Conti, BlackMatter, DarkSide, GandCrab and other long-term ransomware affiliates, they have gone through this process before and might be waiting to see what the fallout is before deciding to move to a new RaaS. #Cybersecurity #LockBit #YourFirstCall #IncidentResponse

You need to stop thinking like this if you don't want to be breached... Gone are the days of anti-social teenagers in their basements defacing websites or stealing some cash. In the modern era, cybercrime is big business, generating billions of dollars each year. Businesses hit by ransomware pay more than $300k on average, a 171% increase year over year. Beyond the ransom, the average cost of forensic investigation after a ransomware attack in 2020 was over $200k. After a ransomware incident, the estimated downtime was over two weeks. And each downtime incident costed a business over $280k. (Source: Cisco) Learn what your organization can do to stay safe online. https://hubs.la/Q02qjGPt0

We curate and share many links to stories/articles in our knowledge base, Teckedin. I am thankful to have connected with Keir Finlow-Bates. His videos are insightful and enjoyable, and we appreciate him sharing them in our knowledge base. "Companies and governments usually have various disaster recovery plans - what to do if their servers are attacked by ransomware, for example. But I don't know of anyone who has a personal recovery plan in place. What happens if your main identity account, for example your Google account, is compromised? What steps do you have to take, and how quickly do you have to take them. More on that in this video." #dataprivacy #security #identitymanagement #socialmedia Thinklair TMI https://lnkd.in/g9j-7B8z