Podcast
Ransomware Battleground
Hosted by Syya Yasotornrat · EN
Ransomware, CyberSecurity & Information Security Hackers, State Actors, OH MY!
Ransomware Battleground hosts, Syya Yasotornrat and Poul Frederiksen investigate the highly topical attacks that Ransomware and its ilk are ravaging organizations big and small today.
If you are a business or IT leader, you can enjoy a digestible conversation to stay on top of the attacks that your organization is always under potential threat. It can get technical, but we're here to put it into laymen's terms and help bring to light the very real dangers of our increasingly digitally dependent society.
Zero Trust may be one of many important layers to keeping your data and money safe!
10episodes
Episodes
Newest firstAll episodes
Ethical Hackers - Why Treat Them As Foes?
Aug 31, 202100:38:31Tap to summarizeNo one likes to be told that their baby is ugly. Magnify that sentiment with a multi-billion dollar corporation with a reputation at stake. THIS is the challenge that ethical hackers face when they are able to breach environments and report it to these businesses. Are they received well? Sometimes yes, and mostly, no. No one is taking anything or charging for the services. It's a hobby for most of these researchers and the thrill of finding vulnerabilities is often a reward in itself. Case in point: We had an awesome opportunity to speak with Higinio "W0rmer" Ochoa and two of his collaborators, Robert "Rej_ex" Willis and "Wabafet," all members of the research collective, "Sakura Samurai." Sakura Samurai has gained a reputation for successfully breaching multiple high-profile government targets. Most recently, we discuss the story of their involvement with John Deere, as highlighted in the Forbes article by contributer Paul F. Roberts, "Under Scrutiny, Big Ag Scrambles To Address Cyber Risk." Chat with W0rmer, Regex, Wabafet Below:Twitter:W0rmer: @0x686967Regex: @rej_exWabafet: @wabafet1
Transcribe →Protecting and Educating Family and Friends
Aug 24, 202100:32:59Tap to summarizeWe know Ransomware attacks have blown up in recent years and targets are as diverse as the type of attacks. We've discussed the challenges for businesses, small and enterprise, but what about for the public at large? Who is at risk? What percentage of the population is security savvy to know what to look for in attacks or attempts?This week's Ransomware Battleground chat features special guest, Karen Rhodes, Chief Technologist at Hewlett Packard Enterprise to share her insights and guidance on educating family on friends on the very real threats affecting everyone.Highlights:Stay up to date on updates and practice good discipline on scheduling and checking for updatesPassword storage tools may be convenient, but understand the risk if those applications are compromised.ASK FOR HELP
Transcribe →Ransomware is Mainstream!
Aug 17, 202100:27:18Tap to summarizeWhat is it about mainstream entertainment that makes the general population suddenly pay attention? Ransomware has grown exponentially in the last year and though it feels like attacks are daily occurrences, the majority of folks haven't changed behaviors, enacted additional security measures or seem to notice the impact that the headline attacks are a fraction of the overall number of attacks. This week, Syya and Paul briefly chat on a recent episode of Last Week Tonight where the host, John Oliver, lays out the very real threats that ransomware poses and the repercussions with Ransomware as a Service, Double Extortion and let's cringe together - toys.Ransomware is Mainstream! But will anything change?
Transcribe →Red Team vs. Blue Team: How does Incident Response work?
Aug 10, 202100:29:49Tap to summarizeRed team and blue team play an important role in defending against advanced cyber attacks that threaten business communications. In this special episode of Ransomware Battleground, we talk through the flow in incident response per cyber kill chain.Ransomware Kill Switch™ can be used by the incident response to control/contain the blast radius in real time using the preventive and proactive zero trust approach. However, when the detections failed on zero day exploits, how can you use Ransomware Kill Switch™ in the post exfiltration mitigation phase?Airgap provides an agentless Anti-Ransomware platform to stop the spread of malware in the enterprise network. Our industry’s first Ransomware Kill Switch™ locks down your most critical network assets at the first indication of compromise with complete control and policy enforcement over the device-to-device and device-to-application communication.
Transcribe →Summer Catch Up & Vent Session
Aug 3, 202100:32:59Tap to summarizeWhere does time go when the heat of summer turns up and families can enjoy a little vacation time? Well hopefully ransomware attacks aren't tied to soaring temperatures because it's looking like over 120% increase in attacks from 2020. No one is immune and it's up to educating the broader population to understand that ANYTHING can be suspect. Even if it's "just" a clickbait website.Poul Frederiksen and Syya Yasotornrat catch up and let off a little steam on how much hackers really chaps Syya's hide.It's no longer a question of what is ransomware. The question is now: How many people do you know that has been a victim of ransomware?
Transcribe →Kaseya Ransomware Attack & Incident Response with Ransomware Kill Switch
Jul 28, 202100:38:06Tap to summarizeKaseya Ltd. is a Miami-based company that provides software to help other businesses manage their networks. The hackers targeted Kaseya’s virtual systems/server administrator (VSA), a type of software that large companies and technology-service providers use to manage and send out software updates to systems on computer networks. The hacks are caused by cybercriminals who acquired and used zero-day vulnerabilities. What do we know about REvil's behavior pattern in this incident? What can you do when your detection solution failed?In this episode, we will demonstrate the post-ransomware incident use cases and how you can automate in-network detection and Ransomware incident response to isolate inside the enterprise network.The integrated Zero Trust enterprise access solution provides organizations an advanced level of visibility and turns every connected endpoint into a Zero Trust endpoint to stop Ransomware lateral movement before they spread.Hear how our joint solution can provide your organization:* Advanced Ransomware detection and incident response with of Ransomware Kill Switch™* Consolidated SOC threat intelligence and analytics* End to end visibility and intelligence into malware behaviorsThanks to sponsor Airgap Networks!Airgap provides an agent-less Anti-Ransomware platform to stop the spread of malware in the enterprise network. Our industry’s first Ransomware Kill Switch™ locks down your most critical network assets at the first indication of compromise with complete control and policy enforcement over the device--device-application communication. Visit them at Black Hat 2021 USA in Vegas or Virtual. For expo passes, contact info@airgap.io.
Transcribe →Shots Fired at Esports - Final Round
Jul 21, 202100:46:38Tap to summarizeIn 2021, the global eSports market was valued at just over 1.08 billion U.S. dollars.(Source)Online games and specifically the Massive Multiplayer (MMO) games, experience multiple attacks from hackers, platform competition that try to block players’ access to the gaming platforms, as well as cheating players that can attack other players slowing their connection, while gaining a competitive advantage. These attacks can take the entire game offline. Can you visualize losing $400,000 dollars per hour (Source).In this series of Ransomware Battleground, we will try to:- Know the eSports industry and the leading MMO game developers- Understand where the “crown jewels” assets such as in-game currency, identity information, and gaming development resources…are hosted- Who is Egregor Ransomware Crew? Is it as RaaS? And how do they hack into corporate networks and deploy the ransomware?- What is their extortion behavior and ransom demand and Crypto tracing?- Is it too far fetched to say Zero Trust is needed for eSports development?- Got Ransomware Kill Switch for eSports?Let's close the final round of this Battleground series with Syya and Nigel. Join us!
Transcribe →Shots Fired at Esports Round 2
Jul 13, 202100:31:34Tap to summarizeIn 2021, the global eSports market was valued at just over 1.08 billion U.S. dollars.(Source)Online games and specifically the Massive Multiplayer (MMO) games, experience multiple attacks from hackers, platform competition that try to block players’ access to the gaming platforms, as well as cheating players that can attack other players slowing their connection, while gaining a competitive advantage. These attacks can take the entire game offline. Can you visualize losing $400,000 dollars per hour (Source).In this series of Ransomware Battleground, we will try toKnow the eSports industry and the leading MMO game developersUnderstand where the “crown jewels” assets such as in-game currency, identity information, and gaming development resources…are hostedWho is Egregor Ransomware Crew? Is it as RaaS? And how do they hack into corporate networks and deploy the ransomware?What is their extortion behavior and ransom demand and Crypto tracing?Is it too far-fetched to say Zero Trust is needed for eSports development?Let’s open up a new conversation series with Syya, Poul, Nigel and Big-Time Higgs. Join us!
Transcribe →Shots Fired at Esports Round 1
Jul 6, 202100:26:25Tap to summarizeOnline games and specifically the Massive Multiplayer (MMO) games, experience multiple attacks from hackers, platform competition that try to block players’ access to the gaming platforms, as well as cheating players that can attack other players slowing their connection, while gaining a competitive advantage. These attacks can take the entire game offline. Can you visualize losing $400,000 dollars per hour (Source).In this series of Ransomware Battleground, we will try to- Know the eSports industry and the leading MMO game developers- Understand where the “crown jewels” assets such as in-game currency, identity information, and gaming development resources…are hosted- Who is Egregor? Is it as RaaS? And how do they hack into corporate networks and deploy the ransomware?- What is their extortion behavior and ransom demand and Crypto tracing?- Is it too far-fetched to say Zero Trust is needed for eSports development?
Transcribe →Ransomware From APT 69420 to Device Cybersecurity
Jun 29, 202100:29:08Tap to summarizeTesla, Cloudflare, Halifax Health, and Equinox are among the victims involved in a breach of more than 150,000 Verdaka's security cameras by a group of hackers known as Advanced Persistent Threat 69420 Arson Cats. The hackers used a "super admin account," which allowed them to peer into the cameras of all of Verdaka's customers. The group found the user name and password for the administrator account publicly exposed on the internet. (Source:https://www.foxbusiness.com/technology/hacker-group-breaches-security-cameras-at-tesla-equinox-cloudfare)Are there reasons to believe that an incident involving office security cameras can impact your customers? How do you defend Device Cybersecurity?In this Battleground, we will dig into the cybersecurity implication of unmanaged devices in organizations and how zero trust isolation policies can be put in practice to prevent lateral threats from propagating in the network.
Transcribe →