As ransomware attacks have quickly morphed over the past few years into a billion-dollar business, the groups behind them are increasingly adopting the practices and tactics of the corporate businesses they target.
Because of recent government-mandated regulations and increased public awareness, companies have resorted to more nuanced, surreptitious methods of acquiring customer data.
The advisory from NSA also offers tactics and techniques and recommended mitigations to cybersecurity teams responsible for protecting critical infrastructure.
How much should we fear for-profit hackers or nation-states tampering with industrial devices to cause a catastrophe? Lesley Carhart, principal incident responder at Dragos and 2020 Women in IT Security honoree offers her take.