TSX - Ransomware 101 for Brokers

TSX Webinar: Ransomware 101 for Brokers January 26, 2017

Presenter & Panelist

Grant Patten Digital Media & User Experience Specialist, CSIO

Bruno Fortin President, J. GĂŠrard Fortin & AssociĂŠs Inc.

Today’s Agenda • Defining Ransomware • Types of Ransomware • Case Studies • Ransomware Remediation • Ransomware Prevention Tips • Q&A

Definition: What Is Ransomware?

Ransomware is a type of malware (malicious software) designed to block access to a computer, network and/or data until a sum of money is paid.

With ransomware, personal data is not stolen. Instead, the malicious software encrypts your data, rendering it inaccessible.

Ransomware By The Numbers ● Ransomware took in ~$1 billion in 2016 (FBI). ● In 2016, the University of Calgary paid $20,000 to retrieve research data that had been encrypted via a ransomware scam (CBC). ● Companies in Canada are the likeliest to pay ransom demands (75%), compared to their counterparts in other countries (Malwarebytes).

Ransomware – An Ongoing Risk "The processing of ransoms will become more automated and more “user-friendly” in 2017.

Hackers will make their payment systems more like those of an e-commerce site to make it easier for companies to pay their ransoms. Most companies will have a ransomware 'budget' in 2017."

- Thomas Fischer, Global Security Advocate, Digital Guardian

Types of Ransomware – CryptoLocker

Types of Ransomware – CryptoLocker

A type of digital currency in which encryption techniques are used to regulate the generation of units of currency and verify the transfer of funds, operating independently of a central bank.

Types of Ransomware – Locky

Types of Ransomware – Locky Tor browser

Types of Ransomware – Petya

Types of Ransomware – GoldenEye

Types of Ransomware – GoldenEye Kits on the “Dark Web”

Ransomware-as-a-service (RaaS)

“Real-life” Example of Ransomware Attack to a Canadian Company in 2016

“Real-life” Example of Ransomware Attack to a Canadian Company in 2016

“Real-life” Example of Ransomware Attack to a Canadian Company in 2016

“Real-life” Example of Ransomware Attack to a Canadian Company in 2016

Ransomware Case Studies – High-Profile Attacks

Ransomware Case Studies – High-Profile Attacks

Ransomware Case Studies – High-Profile Attacks

Panelist/Case Study: Bruno Fortin

Ransomware Remediation 1. Perform a search for the ransom note filename:

1. Isolate each affected user’s workstation

Ransomware Remediation - NoMoreRansom.org

Ransomware Remediation – Backups

Ransomware Prevention ● Keep antivirus updated ● Next-generation firewall (NGFW) … examples:

Ransomware Prevention â—? Educate employees to recognize suspicious emails:

Ransomware Prevention â—? Educate employees to recognize suspicious emails:

Ransomware Prevention â—? Avoid clicking on online ads. Ghostery can disable ads.

Ransomware Prevention ● Do not download software from any unknown website ● Avoid downloading files via torrenting software, e.g. BitTorrent ● Restrict access/write permissions on file servers (and BMSs) as much as possible

Ransomware Prevention ● Enable the ‘Show file extensions’ option in the Windows settings on your computer:

Ransomware – Closing Points ● Ransomware emails are getting harder to recognize, e.g., fake job applications to HR departments ● Investigate your brokerage’s data backup plan NOW if you haven’t already – ensure backups are secure, frequent and thorough enough ● Establish process for educating employees about cybersecurity

Learn More at CSIO.com Members Section gives access to: • CSIO Forms • TSX Webinars (accredited)

Educational Resources: •Infosheets, Articles, White papers •Videos •Twitter: @CSIO •Email: info@csio.com

CSIO Infosheets & Video Series

Thank you for attending our Talk, Share, eXchange!

A link to the recorded webinar will be emailed to all participants shortly.

Next TSX: Enhance Your Brokerage’s Online Presence with SEO (March 9) CSIO.com