Danie van der Merwe

Lorenz ransomware now uses a critical vulnerability in Mitel MiVoice VoIP appliances to breach corporate networks

Mon, 12 Sep 2022 22:37:02 +0200

gadgeteer@hub.netzgemeinde.eu

This is an important addition to the gang's arsenal, given that Mitel Voice-over-IP (VoIP) products are used by organizations in critical sectors worldwide (including government agencies), with over 19,000 devices currently exposed to attacks over the Internet, per security expert Kevin Beaumont.

Mitel has addressed the vulnerability by releasing security patches in early June 2022 after releasing a remediation script for affected MiVoice Connect versions in April.

Makes a lot of sense as VoIP phone systems are nothing other than network devices, but are not often part of the regular IT patching and updating, yet they are all connected to the network, with wonderful "external connectivity" all of their own.

See Lorenz ransomware breaches corporate network via phone systems

#technology #ransomware #VoIP #vulnerability #security

The Lorenz ransomware gang now uses a critical vulnerability in Mitel MiVoice VOIP appliances to breach enterprises using their phone systems for initial access to their corporate networks.

technology security vulnerability ransomware VoIP

How to Prevent Ransomware: 18 Best Practices for 2021

Mon, 20 Sep 2021 16:55:44 +0200

Danie van der Merwe

gadgeteer@hub.netzgemeinde.eu

A ransomware attack can shut down a business for weeks, damage reputation with customers and employees, and open the door for further data breaches. As an attack can be devastating, knowing how to prevent ransomware is an essential skill of any cybersecurity team. This has now become a serious reality for governments as well as corporates. Gone are the days of just planning for fire, theft or disasters. The game has totally changed and planning for ransomware attacks is now a fundamental part of vulnerability and risk assessments.

There are a number of best practices to employ but very obvious vulnerabilities are e-mail systems and patch management. Too many e-mail systems are out of date and not scanning for obvious problems. The easiest way for attackers to get in, is to use known vulnerabilities and exploit them via scripts. So the obvious thing is to have proper patch management in place, and test and apply them quickly. Attackers are pouncing the moment patches are released, as they know most organisations take weeks to apply the patches. This also means monitoring the patch status of all servers, computers, network OS's, etc.

See How to Prevent Ransomware: 18 Best Practices for 2021

#technology #security #vulnerabilities #ransomware

Learn how to prevent ransomware with a mix of safety precautions, company-wide culture of awareness, and a robust disaster recovery plan.

technology security ransomware riskmanagement vulnerabilities

Move aside malware, the rising threat is stalkerware which targets an individual and their identity

Sat, 01 May 2021 15:12:01 +0200

Danie van der Merwe

gadgeteer@hub.netzgemeinde.eu

Much like traditional crime it shifts from a closing opportunity to other means where the opportunities are easier. Car anti-theft systems got better and better and then that crime pattern evolved to hijacking with owners already inside the vehicle.

In the same way many of the really juicy opportunities for ransomware attacks have been closing down, with companies better protecting copies of their data, and now often just refusing to pay up (as few actually have their full data returned and it can still be leaked out by the perpetrators).

So attacks are moving away from just flooding the Internet with malware files, to now targeting specific individuals after research has been done about them. Of course someone will try to sell a "solution" to this problem but nothing is as effective as a highly aware workforce who don't easily get tricked into blindly clicking on links in e-mails (even if received from a 'known' sender) and being wary of anyone requesting personal information. Which is why it's so upsetting to still see our personal details being leaked from Facebook and numerous other companies that we trust.

See Move aside malware, the rising threat is stalkerware | Fin24

#technology #ransomware #stalkerware #malware #identitytheft

Consumers must remain vigilant when it comes to their online activities if they are to keep themselves safe from the growing threat of cyberattacks.

technology ransomware