Ransomware Attack on CRICH

Industry Standout

CRICH, operating within the Media & Internet sector, has become the latest target of the ransomware group Lockbit2. This sector is particularly vulnerable to ransomware attacks due to the critical nature of the data it manages. A notable increase in ransomware incidents has been observed, with phishing being the primary method for 62% of successful attacks.

Vulnerabilities

The frequency of ransomware attacks is on the rise, with the average monthly victim count reaching a record high of 31 in 2023. Remote Desktop Protocol (RDP) compromise stands as the leading initial access vector, showing a significant uptick since the third quarter of 2022. Conversely, the prevalence of email phishing as an entry point has seen a decline during the same timeframe.

Mitigation Strategies

Organizations are advised to enhance their cybersecurity posture to mitigate the risk of ransomware attacks. Essential measures include the enforcement of stringent password policies, prompt software updates, and the provision of employee cybersecurity awareness training. Furthermore, establishing a comprehensive backup and recovery strategy is crucial for minimizing the consequences of an attack.

Sources

• CRICH - I nostri prodotti
• Ransomware Tracker 2024: Recent Ransomware Attacks - Spin.AI
• There were over 4000 ransomware victims in 2023 - Security Magazine