Cisco Data Breach – Ransomware Group Allegedly Breached Internal Network & Leaked AD Credentials

[Kyaw_Myo_Oo]

Dear All,

A massive security breach has allegedly exposed sensitive credentials from Cisco’s internal network and domain infrastructure.

The Cyber Press Team has observed leaked data from the Kraken ransomware group posted on their dark web blog, which appears to be a dump of hashed passwords from a Windows Active Directory environment.

https://cyberpress.org/cisco-data-breach-2/

Questions for discussion: Are your organization's Ransomware Defense Strategies effective and efficient? How can organizations adapt their defenses to counter these evolving threats?

[dcontesti]

I realize that some folk will throw things at me for this but unfortunately with Ransomware and other attacks, out weakest link is end users.

I have always been amazed at how many times, you say DO NOT DO THIS, they still do it.  Please I am not saying that all Ransomware happens this way but a good percentage does.

My nickel Canadian

d

[nkeaton]

Thank you.  I worry about killware but is no monetary incentive for anyone to thwart it like companies that deal with ransomware protections.  I did find the ISC2 article on the FBI believing that extortionware was more prevalent than ransomware interesting.  

[nkeaton]

Old is a little more concerning than new to me.  https://www.securityweek.com/cisco-says-ransomware-groups-leak-related-to-old-hack/amp/?fbclid=IwY2x...