EMERGENCY INCIDENT RESPONSE
Get Started

Prepare Your Company for Future Attacks: Threat Actors Webinar

Vivian Lee

Prepare Your Company: That’s a wrap!

Airiam and ThreatLocker wrapped up our final webinar in our Threat Actors series! Art Ocain and Danny Jenkins went in-depth about Royal Ransomware and data exfiltration.

Royal Ransomware

Royal Ransomware is a sophisticated malware that emerged in 2022. The malware quickly gained notoriety due to the unique partial encryption approach that allows the threat actor to choose a specific percentage of data in a file to encrypt, which can help them evade detection. In addition, they also engage in extortion tactics where they threaten to publicly release the data if they do not receive the ransom. In November 2022, Royal Ransomware had 43 new victims with ransoms ranging from $250,000 to $2 million.

Airiam and ThreatLocker have both had extensive experience dealing with Royal Ransomware. While Airiam has focused on pre and post-breach, ThreatLocker has great experience in incident response, particularly in terms of immediate containment and isolating machines during rebuilding.

Data Exfiltration

During the webinar, Danny showed us a data exfiltration attempt using a Rubber Ducky. A Rubber Ducky is a specific type of hardware device used in hacking and penetration testing. A Rubber Ducky is typically used by ethical hackers, security professionals, and penetration testers to automate tasks or exploit vulnerabilities in a target system. It is programmed to mimic keyboard inputs and can perform a wide range of actions, including:

  • Keystroke Injection
  • Malware Deployment
  • Data Exfiltration
  • Automated Tasks
  • Social Engineering

Using the Rubby Ducky, Danny also showed us how ThreatLocker blocked the attempts to hack into the victim computer.

View the Webinar

Thanks to everyone who attended our webinar! If you’d like to view this webinar or our previous ones, please use the links below to view them on YouTube.

TOPIC PARTNER REGISTER
Live Attack Simulation Watch Here
How to Defend Your Company During an Attack Watch Here
How to Rebuild Your Company After an Attack Watch Here
How to Prepare Your Company for Future Attacks Watch Here

Stay notified about upcoming webinars and events with the link below.

New Resources In Your Inbox

Get our latest cybersecurity resources, content, tips and trends.

Other resources that might be of interest to you.

Identity Management Guide: What It Is & How It Works
Identity management is all about giving the right people access to the right resources in your organization (while keeping the bad guys out). Simple in theory, but it can get pretty complex in practice.  It’s the foundation of how your organization han
Jesse Sumrak
>>Read More

7 Security Operations Center (SOC) Tools for Advanced Security
Ransomware attacks have tripled since 2020. The average incident now costs businesses $1.85 million, and that number keeps climbing. And while 60% of companies run security operations centers (SOCs), most are flying blind with fragmented tools and silo
Jesse Sumrak
>>Read More

Threat Actors: What Do I Do?
Threat Actors: Breaking It Down As a business owner, there are so many things you need to worry about on a daily basis, like employee management, product competition, and customer satisfaction. The last thing you want to think about are threat actors l
Vivian Lee
>>Read More