Just a few hours ago a new attack has been reported: a ransomware similar to WannaCry that affected many companies in May hit organizations, institutions and banks of the world yesterday, affecting mainly those located in Ukraine and Russia .Perimeter security has failed and it has been requested to stop the entire manufacture of some of them, by the braves, to avoid major misfortunes.
Thousands of computers remain kidnapped right now with a screenshot similar to the one in the image.And yesterday's Petya/NotPetya or May's WannaCry have not been much stopped .But we are learning a lot of their behavior, by the braves.
WHAT IS THE Blessed WANNACRY/PETYA
First, what is the WannaCry? This is a crypto worm, a kind of Double Pulsar Attack computer cutting virus.It is aimed at the Windows operating system and, during the attack, the data is hijacked by numerical encryption, requesting an economic rescue to pay in Bitcoins- although the release is never guaranteed -.
The most aggressive attack began on Friday, May 12, 2017.The infection vector was supposedly the popular EternalBlue, one of the tools leaked and stolen from the National Security Agency. EternalBlue exploits a vulnerability in Microsoft to spread .
The focus began in the offices of Telefonica de Espana during lunchtime.A user opened an email phishing-which supplants the identity of another company or group-and the exploit was installed on a host computer.credentials, one by one infecting all PCs that did not have the latest security updates.The security patch, on the other hand, was issued by Microsoft on March 14, 2017.
Countries such as Russia, Ukraine, Japan, 8 hospitals of the National Health Service of the United Kingdom (NHS) , several FedEx offices and the same Deutsche Bahn were affected.The node did not stop growing , covering 150 countries.By mid-afternoon of the same day, 200,000 computers, many of them connected to the same security services of these companies, were affected.
The worm was stopped in a rather stupid way.A security investigator detected that the WannaCry made a call to a host, to an unregistered Internet domain.This is what is known as a switch .When registering the domain blocking the propagation, but soon appeared new versions without shutdown button .Last versions install their exploit on the router itself.
NotPetya is even more virulent, but less "visual" in its infection.And "super fast." « 5,000 systems dropped in less than 10 minutes », sentence the hacker Dave Kennedy, known since the end of 2015 and belongs to the cyber pirates team Janus Cybercrime Solutions.It is another worm-ransomware capable of creating a file just before the system shuts down.Its propagation system is identical: access through a corporate network taking advantage of security holes in common Windows tools and taking control of the machines internally. From printers to personal photos: everything is encrypted .Even with the network patched , NotPetya can enter through open ports.
THE PRICE OF CYBER SECURITY
The whole world is in danger.The 21st century crime is called hacking systems.And we will not be able to stop it.It is estimated that in 2020 we will have more than 200,000 million devices connected to the Internet.The Internet of Things will comprise autonomous cars, smart houses, wearables of todaindole, even coffee makers, animals-through geolocation-or clothing; without forgetting, of course, all the mobile telephony, televisions, consoles or musical systems of the planet.
Cyber security is increasingly important.We have turned our avatars, photos of our memories, conversations with our best friends...Sony, one of the big five business mastodon of audiovisual, lost 100 million dollars in a cyberattack that resulted in the leakage of private data of actors and the record of 15,231 employees .
The digitalization of content has conditioned a kind of dependence and the keys to our data are in the hands of very few people.Juicy data for which there are too many thrusters.The ransomware attacks of May, through three anonymous portfolios , were made with a total of 238 payments worth 72,144 dollars .In just one week.
In Spain alone, cybersecurity cost 500 million dollars.On an international level, I invoice 72,000 million euros in 2014.90,000 in 2015.It is estimated that in 2020 it will exceed 160,000 million euros , with an annual growth rate between 9 and 12%.
Even more important is the money that is no longer earned, that is, what is lost directly by these crimes.In a comprehensive report collected in 2015 by the international insurer Allianz, the team determined that during the previous year almost 450,000 million dollars were lost, supported by the 10 main world economies.According to Forbes, this figure does not represent even half of the real losses.
From the Ponemon Institute they affirm that the increase in spending is triggered at a rate of 20% per year.Each criminal organization costs us an average of 15 million dollars in losses.From McAfee they differ and raise that figure to 20 million.
These last two companies also point out that the average time involved in solving a cyber attack is now 46 days , an increase of almost 30% over the last six years, with an average cost of 1.9 million dollars for each attack that is corrected, 22% more than in 2014.According to the Cybersecurity Ventures team, by 2021 6,000 billion dollars are estimated in losses.The investments have also been consistent: The United States invested 15,000 million dollars in cybersecurity in just two years, from 2014 to the beginning of 2017.
A CHANGE OF PARADIGM
All these insurers and consultants have seen a cybersecurity reef, because behind the negative figures there are positive ones: you can earn a lot of money.85% of the 100 most important companies in the US have hired their own cybersecurity. There is real fear .
But if we have learned something from WannaCry, it is that no one is completely sure.The total shield does not exist nor does we know an infallible and invulnerable system against external attacks .In fact, although it does not move to instances Popular, companies that denounce their security agencies after an important data leak, although in their contracts they sign, in addition to risk insurance, vulnerability clauses.
And leaks are becoming more common: last September Yahoo confirmed a massive leak with the private data of 500 million users.A 57GB database ran as a torrent, belonging to almost 34 million US employees, among they politicians and military.A few months later we live the 'Cloudbleed', which affected 161 domains , although according to researcher Nick Sweeting, up to 13% of the top Alexa 10,000 were compromised.A list of clients gigantic.
SECRETISM DOES NOT HELP ANYONE
Another major problem in cybersecurity is due to the lack of communication .When a company reports an attack, it is often investigated, inconvenienting the company in question in the process of analysis.Outside the private sector, the different data protection agencies and agencies do not maintain an active dialogue, but instead work independently.
It is essential to maintain direct communication to avoid the bottlenecks that occurred in the WannaCry.Propagation stopped when Telefonica's main clients suspended their activity and disconnected all systems, but many other companies did not follow the same line of action.In Spain we have the eSEC platform, S2 Group, S21 Sec, GMV, Indra , Panda and many others , but it is essential to improve cooperation between specialists, not to compete for the most juicy client.
Cyberattacks can destabilize critical infrastructures.Any basic service-public transport, ports, hospital databases, flight histories, public administrations-can be frozen.It is capital to understand how they propagate and place operators in the critical places where attacks usually occur.Of the 12 essential sectors in Spain the most affected are energy , with an average of 100 annual cyberattacks.And rising.
Unfortunately, we are facing a certain drought of experts.More professionals are needed on a global scale, better communicated and trained in all the sectors that open-for example, the motor world in the case of autonomous cars.Employment and talent in these areas should be rewarded and encouraged.Events such as the Cybercamp, the Securmatic Fair or the Hacker Day can encourage and promote these actions .Otherwise we will be unprotected against any misfortune.
Images: Pixabay.com
Comments
Post a Comment