kompozit · edukator režim · za predavanje i PDF
Ransomware
Pretnja u centru, tehnike kojima se izvodi levo, odbrane koje je suzbijaju desno. Ispod — mapa faza napada: kojom tehnikom se ulazi i koja odbrana je presreće.
↘ Techniques used to carry it out17
Techniques used to carry it out. Klik vodi na stranicu pojma.
- Exploitation→
- Data Exfiltration→
- Malware Delivery→
- Lateral Movement→
- Command & Control→
- Impair Defenses→
- Double Extortion→
- Automation & Scripting→
- Encrypted C2 Channels→
- Living off the Land→
- Payload Obfuscation→
- In-Memory Execution→
- Data Destruction→
- Indicator Removal→
- Log Tampering→
- Fast-Flux DNS→
- Domain Fronting→
threat · № 001 · malware
Ransomware
Ransomware locks a company's data and demands payment to release it. The ransom is asked in cryptocurrency because it makes the money harder to follow — which is exactly why attackers use it.
↓ mapa faza · kojom tehnikom se ulazi, koja odbrana presreće
faza · ulaz · tehnika
Phishing / ukradeni kredencijali
presreće · odbrana
MFA · anti-phishing gateway · obuka
faza · uporište · tehnika
Eksploatacija RCE ranjivosti
presreće · odbrana
Patch management · EDR
faza · širenje · tehnika
Eskalacija + lateralno kretanje
presreće · odbrana
PAM · mrežna segmentacija
faza · udar · tehnika
Onemogućavanje bekapa + šifrovanje
presreće · odbrana
Imutabilni bekap 3-2-1 · plan oporavka
↗ How it is defended against18
How it is defended against. Klik vodi na stranicu pojma.