2 ms·
> Printers on the City of Dallas network reportedly began printing out ransom notes on Wednesday morning. This makes the "Tech enthusiast vs. engineers"[0] mem
by 1659447091 4y ago
> Printers on the City of Dallas network reportedly began printing out ransom notes on Wednesday morning.
This makes the "Tech enthusiast vs. engineers"[0] meme much more funny.
On a more curious note, what prevents companies hit with these from wiping computers and restoring data from a clean backup and fresh system installs for workstations? Is there something in the attack that prevents this? or is the issue about the data being publicly released?
[0] https://www.reddit.com/r/homeassistant/comments/alru1y/tech_enthousiasts_vs_engineers/ https://www.reddit.com/r/homeassistant/comments/alru1y/tech_...
- fatfingerd 4y agoI think it keeps getting easier to make stay resident attacks but from a game theory PoV it doesn't make sense to a ransomware maker to be known for charging over and over until people refuse to pay.
- boston_clone 4y ago> what prevents companies hit with these from wiping computers and restoring data from a clean backup and fresh system installs for workstations? honestly, it's probably that they simply don't have any clean backups and / or a good restore process; most organizations don't, and ransomeware recoveries for local governments over the years reinforces this.
- mr_mitm 4y agoIn general, nothing. But before you restore backups (if you have any that weren't encrypted) you may want to determine the exact time at which you were compromised, or else you'll be restoring potentially tainted backups. Depending on how well you're organized that alone will take weeks, especially considering that your logs may be encrypted as well. Sometimes you don't even know how to contact everyone, because your comms are down, too.