Ransomware shuts down US pipeline

[RETAC21]

On 5/19/2021 at 1:02 AM, bojan said:

How local branch of big worldwide marketing company dealt with ransomware...

- IT nuked system and restored backups. Work was done overnight, not really paid as overtime.

- Lost work hours were substituted by people working overtime, again w/o (or with very little) overtime bonuses.

That is how it works in whole eastern Europe, EVERYWHERE no company large or small GaF about ransomware, since it is cheaper to get your already underpaid workers to put some extra back into it (or else...) and mitigate consequences.

None really targets anyone here, or in Romania, Bulgaria, Ukraine, Albania, Bosnia etc, etc, by ransomware other than by the accident. It is simply not worth it, since targets will only rarely pay. I know of 5-6 attacks... None paid. When workforce is so cheap (and replaceable if they complain about exploitation by the companies) you don't GaF if they will have to work twice, you won't even have to pay them extra.

FIFY. Overtime pay is not a factor in ransomware. Big, Bad corps will just do the work from cheaper, less regulated locations.  I doubt any company now works without backups on a daily (at least) basis, but indivuduals, smaller companies, surely do.

[Ivanhoe]

2 hours ago, RETAC21 said:

FIFY. Overtime pay is not a factor in ransomware. Big, Bad corps will just do the work from cheaper, less regulated locations.  I doubt any company now works without backups on a daily (at least) basis, but indivuduals, smaller companies, surely do.

The problem being that the average time between infection and the ransom notice can be 2+ months. Some organizations think of "backups" in the textbook sense, restoring from backups due to a HW failure.

Now we need archival backups, going back months. That costs time and money; thus the problem. Back in the day, all sorts of backup tape cycling systems, now disk drive systems. Grandfather/father/son systems etc. AFAIK few organizations set aside a monthly backup every month to build up a 6-12 month set of backup savesets. That's what needs to happen, which requires a culture change.