4 ms·
Ransomware requires a few preconditions in order to do real damage. Mostly those all boil down to: 1. Shit-to-no backup solution in place. 2. Poor segmentatio
by tempfs 5y ago
Ransomware requires a few preconditions in order to do real damage.
Mostly those all boil down to:
1. Shit-to-no backup solution in place.
2. Poor segmentation from a network/identity/privilege perspective.
Datacenters usually have this kind of stuff down pretty well or they don't stay in business very long.
Additionally, traditional ransomware attacks start as client-side attacks[phishing/fake search engine results promising app updates/etc]. This kind of attack works way better against Mary Sue in accounting or Chuck in sales but the scenario of Datacenter admins checking their Gmail on admin workstations or servers is hopefully insanely rare or never.
- miohtama 5y agoAlso, data centers rarely run on vulnerable Microsoft Windows workstations.
- mintskoal 5y agoNeeded a flashback to the 90s tonight, thank you. Our 3k+ Windows VMs sitting in a datacenter would tend to disagree. There are a lot of good answers about segregation, diligence and security in this thread. Knee jerk "windows!!!!" replies aren't good at all.
- RantyDave 5y agoIt's not just "windows", it's the kind of people who are on the other end of it. If your attack relies on someone downloading "funny toolbar" and saying "yes" to the wrong thing, then at least some of the world wide droves of Karens will let it in. Hence ... targeting Windows.
- pjmlp 5y agoIndeed, they run on properly configured Microsoft Windows Server instances.
- tester34 5y agopretty naive to think that datacenter is only made of engineers/admins but anyway, even sys admins use both - windows and linux.