0
This tactic is used to divert initial security controls and collect information from the initially compromised system if threat actors deem it as a lucrative option. Through reconnaissance, the threat actors decide the initial target to gain entry into the organisation. This is also because ransomware operations are more profitable for the threat actors when they require manual effort from the organisation’s employees, who would end up compromising mostly the entire network. Once inside the compromised network, the malware can move laterally, stay put, increase its privileges and deliver the final payload. Because of all this, by the time the AntiVirus product can detect its binary, mitigating the impact may be too late. Therefore, it is always better if the AntiVirus vendors try to detect the ransomware at the phishing stage.
To mitigate the risk of an attack, it is crucial to educate users about old and contemporary phishing trends. Also, it is advisable to use a reputable security product such as “K7 Total Security” and keep it up to date to stay protected from such threats.
