Sophos’ Post

Schedule a free Security Audit with us to help avoid downtime like this

The 2023 FBI IC3 Report is out. Every year, I read this report to refresh my cybercrime knowledge and, most importantly, $$$ lost. $12.5bn lost in 2023. BEC - $2.9bn in 2023. Ransomware - $59.6m in 2023. Let those numbers sink in.

Want to learn more about the Snatch ransomware group and how they are leaking data about its users and internal operations? Read this post courtesy of KrebsonSecurity for more. #cybersecurity #ransomware #cybercrime

Is your network holding on by a thread? Don't add to the long list of recently affected big business names being brought down by cybercrime. Let Nuvera help assess your network's health! 💪 https://lnkd.in/gsyzsNra

This month is Cyber Security Awareness Month. If you immediately think, 'Oh yeah, that's for someone else to worry about'... then you're missing the point. If you use a computer, mobile phone or almost any other form of technology, you may not realise just how easy it is to fall victim to a cyber attack, and it could cost you much more than a bit of humiliation. The Australian Cyber Security Centre is a great starting point to get yourself up to speed, so remember, Be Cyber Wise, Don't Compromise. #CyberSecurity #CyberWise #IT

Toronto Public Library ‘remains a crime scene’ after ransomware attack. Here's what you need to know: 1. A ransomware attack targeted Toronto Public Library (TPL), forcing it to temporarily close access to its online reservation system and databases. The website is currently being investigated by the authorities, making it look like a "cybercrime scene". 2. TPL confirmed no personal data was breached during the attack, but did not disclose further information about the ransomware used or the extent of the damage. The investigation is still underway. 3. This incident follows a trend in ransomware attacks on public services, reflecting the need for stronger cybersecurity measures. As libraries transition more services online, they represent increasingly attractive targets for cybercriminals. Learn more by visiting The Record from Recorded Future News: https://lnkd.in/drwcaN3q

This #TrustpilotTuesday, we're sharing Rafael's nod to Macrium Image Guardian (MIG). If you're using v7.1 or higher of our backup software Macrium Reflect, your backups will be protected by MIG. It grants write access to Reflect and related Macrium imaging tools only. This makes unauthorized modifications - like encryption by ransomware software - virtually impossible. At a time when ransomware is firmly in the headlines, MIG offers the peace of mind our users need that they're doing all they can to protect their data. Keep your reviews coming via Trustpilot - https://lnkd.in/eetPEdiu #RansomwareResilience #TrustMacrium

Nonprofit executives must frequently steer their organization around challenges, including preventing financial loss. In the online ecosystem that we all share, fraud, privacy breaches, and #technology disruptions due to cyber-related incidents heighten your risk of financial losses. Read our August Executive Director Bulletin to learn about 501 Commons’ #cybersecurity training and educational resources so you can become better adept at protecting your #nonprofit from cybercrime. https://lnkd.in/gafGKfeW

Its another LockBit update!... 1. LockBit affiliates are actively exploiting ConnectWise's ScreenConnect critical vulnerability, deploying LockBit ransomware. What they are doing with the data when they steal it, and how they are negotiating with victims, is unclear. 2. Law enforcement released their info on Lockbit's admin, but I'll be honest, it's underwhelming (screenshot below)... The unmasking of the Lockbit subgroup National Hazard Agency admin, Bassterlord, has been far more effective and, to be honest, entertaining. 3. Based on what we can see, LockBit have still not restored any public facing infrastructure, and the longer this continues the better!! 4. We are surprised about the lack of movement among the LockBit affiliates. It appears, from what we can see of the major Russophonic darkweb communities, that despite many of them being quite pissed off, they havent yet indicated movement to a new RaaS. Given most of these folks are ex-Conti, BlackMatter, DarkSide, GandCrab and other long-term ransomware affiliates, they have gone through this process before and might be waiting to see what the fallout is before deciding to move to a new RaaS. #Cybersecurity #LockBit #YourFirstCall #IncidentResponse

⚠️ It's World Password Day 2024, so here's a reality check: ▪️ '123456', 'admin' or 'password' were the most common passwords in the U.S. in 2023 ▪️ It takes just five minutes to crack an 8-character password ▪️ Ransomware growth skyrocketed by 63% over in 2023 ▪️A staggering 44% of ransomware payouts amounted to $25,000-$99,999 in 2023, exposing personal information and lucrative data Read on for more tips to better secure your account ➡️ https://lnkd.in/gy8q3bkQ