AbleToTrain by Willing & Able

Ransomware could copy credentials from the victim’s network

In terms of the number of cyber assaults recently, ransomware assaults were the most serious danger. Their number has only risen dramatically in 2022.

What is ransomware and how can it infect you?

Ransomware is a type of virus that encrypts or locks the victim’s computer and demands payment of a ransom in order to receive the decryption key.

Infected links were also the most common technique for cyber thieves to infect computers with ransomware in 2022.

Recent ransomware statistics

Brian Krebs, a well-known digital security writer, has identified a new concern with these assaults, which are becoming increasingly common worldwide:

Data from the affected network might be collected by ransomware, allowing the attacker to access it whenever he wants.

This is a significant issue because the standard approach for corporations following an attack is to reset users’ passwords. Users have access to email, servers, and workstations on a network.

As a result, even after passwords have been reset, attackers will have access to any password on any device in the affected network.

Summary

After examining Ryuk’s November 2019 ransomware assault on Virtual Care Provider Inc., a US IT services firm, Krebs came to this conclusion.

According to research, the victim was infected with Emotet malware, which includes a password stealing module, prior to the ransomware assault.

Given that attackers have access to credentials on the affected network, BLADE security experts