Anatomy Of A Targeted Industrial Ransomware Attack

In this presentation, we review malicious activity that involved SCADAfence's incident response team, which assists companies during industrial cybersecurity emergencies. Attendees will learn how ransomware infected the victim organization's network and how the incident response team gathered evidence, including where to look first. Then, we'll explain how the evidence was analyzed; what the initial findings were; and how the attackers were caught. Finally, we'll discuss additional attack methods used by the cyber criminals so everyone can take appropriate steps to prevent such attacks within their organizations. Learning objectives: 1. Learn how industrial networks get infected with targeted ransomware. 2. Discover where to look for evidence; how to analyze it; and how to find attackers hiding in the network. 3. Understand additional types of attack methods used by cyber criminals in industrial networks, as well as best practices to protect those and all other networks.