Ransom is the New(ish) Hack

Publication
May 12, 2017
Fans of Netflix's popular series, Orange is the New Black, got an early, albeit illegal, gift last week. A hacker who calls him or herself "The Dark Overlord" obtained copies of episodes from the upcoming, unreleased Season 5 of OITNB from Larson Studios, the show's post-production company. The Dark Overlord demanded payment in exchange for not releasing the stolen copies. Netflix refused to pay. Hours later, The Dark Overlord released the Season 5 episodes and announced on Twitter where they may be viewed on the Internet.

While the incident is still under investigation, cybersecurity industry professionals believe The Dark Overlord infiltrated Larson Studios' servers using a phishing attack to obtain employee email and login credentials.

This type of attack - penetration of a system, seizure of valuable files, and extortion - is becoming more frequent. The most common attack of this sort involves implanting "ransomware" into a company's server and email system. "Ransomware" is malware or other disruptive code that rewrites or encrypts files on the victim's computer or system, rendering the files useless. "Ransomware" victims can recover their files only by paying the hackers to reverse the rewritten or encrypted files.

It's not hard to imagine the catastrophic consequences that would befall an organization that stores trade secrets - e.g., customer lists, price lists, product formulas - on its servers. The victim would face a Hobson's choice - pay the hacker's exorbitant ransom demand or see its secrets released on line or its files irreparably corrupted. The best defense to a "ransomware" or attack and consequent extortion is vigilance, particularly in training employees to prevent phishing and other breaches that allow hackers in.
Related Practices
RELATED PEOPLE
YOU MIGHT ALSO LIKE
Speaking Engagement July 19, 2024
Howard E. Nelson participates on the panel Hot Topics/Emerging Issues In Waste Management at the 38th Annual Environmental Permitting Summer School. The panelists discuss the latest policy changes including new emerging elements for site closures involving Water Management Districts, the effects of ...
Speaking Engagement July 18, 2024
Thomas F. Mullin participates on the panel Keeping Your Eye On The Ball: Scoping The Appropriate Environmental Due Diligence For The Project at the 38th Annual Environmental Permitting Summer School. The panelists discuss appropriate scoping of the environmental due diligence process, taking into co...
Speaking Engagement July 17, 2024
Howard E. Nelson participates on the panel Land and Golf Course Redevelopment: Opportunities and Challenges at the 38th Annual Environmental Permitting Summer School. The panelists discuss how to navigate the substantial challenges regarding land use, availability of water (quantity and quality), an...
VIEW MORE