BOOK AN APPOINTMENT WITH AN IT SPECIALIST TODAY

Could A Colonial Pipeline-Style Cyberattack Disrupt Your Business?

Could A Colonial Pipeline-Style Cyberattack Disrupt Your Business?

The Colonial Pipeline ransomware attack garnered national headlines after hackers caused widespread gasoline shortages along the Eastern U.S. seaboard. Among the hardest hit, North Carolina saw more than two-thirds of local pumps closed, and 80 percent of fueling stations in the nation’s capital ran dry.

Images of long gas lines and the reported $4.4 million ransom paid to the criminal organization known as DarkSide highlight the fact determined cybersecurity has never been more essential to corporate survival. The question business leaders may want to consider right now is whether sophisticated cybercriminals could penetrate your defenses and disrupt operations.

Colonial Pipeline Ransomware

How Devastating Are Ransomware Attacks on Businesses?

The internet provides digital thieves a global reach, and penetrating outfits such as Colonial Pipeline represent just the tip of the spear. DarkSide reportedly forced 47 business decision-makers to hand over upwards of $90 million in Bitcoin payments on the dark web alone, according to reports. If that figure raises concern that your organization could be hit in the near future, cybercrime statistics offer no solace.

A recorded 304 million ransomware attacks were orchestrated in 2020, representing a 62 percent increase from the previous year. The average ransomware demand topped $233,000, with hackers routinely negotiating higher payoffs from more lucrative corporations. Approximately 1 out of every 5 small businesses are the focus of an attack and 80 percent of mid-sized outfits are targeted by cybercriminals in this fashion. While hacks that create widespread disruption such as the Colonial Pipeline make national news, companies often close for two weeks even if they pay the ransom. It’s also not unusual for digital business hijackers to take the cryptocurrency money and not provide the decryption code necessary to restore operations.

Although media outlets reported that DarkSide was shuttering its underworld activities after accumulating substantial wealth, business professionals have every reason to be even more afraid of what comes next. What non-cyber security experts may not be aware of is that DarkSide does not typically lead to ransomware attacks. Its group of online miscreants operates what technology experts call “ransomware as a service.”

That means they craft malicious software for others inclined to target an organization. If your business has international rivals or appears like low-hanging fruit to anyone online, they could task DarkSide or another digital mafia outfit with creating a ransomware file to upend your company.

How To Protect Your Company From Cyberattack Disruption

The Colonial Pipeline hack illustrates the fact that companies with substantial resources can fall prey to a nefarious individual if they let their guard down for a second. Ransomware attacks, like other incursions, typically stem from some type of human error. In many cases, cybercriminals target wide-reaching organizations by sending out thousands of emails laced with malware. Sophisticated hackers such as DarkSide may employ social engineering to gain the trust of someone with access to the network. Once an employee falls for the trickery, they may divulge network access information and a hack ensues. The critical point is that people too often make innocent mistakes and that’s why the following measures remain mission-critical.

  • Require employees to use strong passwords.
  • Mandate password updates on a regular basis.
  • Have a cybersecurity firm integrate multi-factor authentication technology.
  • Ensure all devices possess commercial-grade firewalls and antivirus software.
  • Implement “zero trust” network policies that limit employee access.
  • Deploy virtual private networks for remote workers.
  • Provide ongoing cybersecurity awareness training to all personnel.
  • Create a system of cyber-threat alerts for imminent dangers.
  • Back-up all digital assets to the Cloud and redundant hard drives out of hackers’ reach.
  • Conduct cybersecurity audits that include penetration testing.

Despite the splashy Colonial Pipeline headlines, many industry leaders continue to lag in cybersecurity vigilance. According to research, only 57 percent of decision-makers had a cybersecurity risk assessment conducted in 2020. That may be why nearly 80 percent reportedly lack confidence their operation could withstand a cyber assault.

Business leaders have a rare opportunity to learn from the Colonial Pipeline and avoid disruption. By enlisting the support of an experienced cybersecurity firm, the necessary defenses and employee awareness training can be implemented promptly. In a world in which an Eastern Bloc hacker can attack any company on the planet, hardened cybersecurity defenses are job one.

More Like This

AA21-265A: Conti Ransomware

Original release date: September 22, 2021 Summary Immediate Actions You Can Take Now to Protect Against Conti Ransomware • Use multi-factor authentication. • Segment and segregate networks and functions. • Update your operating system and software. Note: This Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework, version 9. See the ATT&CK …

AA21-265A: Conti Ransomware Read More »

Read More

Are You Planning to Download Windows 11 Free Update?

Are You Planning to Download Windows 11 Free Update? Here’s a Quick Guide Microsoft’s new operating system has generated considerable interest from users and tech experts. Windows 11 brings many key new features that enhance the overall user experience. From October 5, 2021, Microsoft will roll out the update to eligible Windows 7 and 10 …

Are You Planning to Download Windows 11 Free Update? Read More »

Read More

AA21-259A: APT Actors Exploiting Newly Identified Vulnerability in ManageEngine ADSelfService Plus

Original release date: September 16, 2021 Summary This Joint Cybersecurity Advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework, Version 8. See the ATT&CK for Enterprise for  referenced threat actor tactics and for techniques. This joint advisory is the result of analytic efforts between the Federal Bureau of Investigation (FBI), United States …

AA21-259A: APT Actors Exploiting Newly Identified Vulnerability in ManageEngine ADSelfService Plus Read More »

Read More

If You Own These Four Small Business Cisco Routers: It’s Time to Replace Them

If You Own These Four Small Business Cisco Routers: It’s Time to Replace Them A security flaw discovered in RV110W, RV130, RV130W, and RV215W Cisco routers creates significant vulnerabilities. Traditionally, these UPnP (universal plug and play) routers would receive security updates from the vendor. However, Cisco recently announced that it has no plans to release …

If You Own These Four Small Business Cisco Routers: It’s Time to Replace Them Read More »

Read More

Do You Want to Speed Up Your Computer?

Do You Want to Speed Up Your Computer? Here are Top Tips A slow computer can undermine productivity and become a source of frustration. Fortunately, there are several ways to boost speed and overall performance, irrespective of whether your computer is relatively new or older. You can achieve the desired performance by following specific tips …

Do You Want to Speed Up Your Computer? Read More »

Read More

AA21-243A: Ransomware Awareness for Holidays and Weekends

Original release date: August 31, 2021 Summary Immediate Actions You Can Take Now to Protect Against Ransomware • Make an offline backup of your data. • Do not click on suspicious links. • If you use RDP, secure and monitor it. • Update your OS and software. • Use strong passwords. • Use multi-factor authentication. …

AA21-243A: Ransomware Awareness for Holidays and Weekends Read More »

Read More