Briskinfosec Cloud Security

Types of Ransomware & Real Time Incidents In UAE 2024 Types of Ransomware 1. Crypto Ransomware: Encrypts files and requires payment for the decryption key. 2. Locker Ransomware: Completely restricts user access to their device. 3. Scareware: Mimics ransomware without causing any real damage to the system. 4. Doxware : Intimidates victims by threatening to disclose sensitive information unless the ransom is paid. 5. RaaS (Ransomware as a Service): Ransomware tools available for purchase on the dark web. Ransomware Incidents In 2024 UAE Countries 1. Crypto Ransomware Incident: Emirates Oil & Gas Company Breach (2024): In March 2024, a significant oil and gas corporation in the UAE fell victim to a crypto ransomware attack, allegedly executed by the Royal ransomware group. The attackers encrypted essential operational data, including project documentation and financial information, demanding a ransom of $10 million in Bitcoin. This incident caused substantial disruptions to the co...

🚨 Beware of Cryptojacking! 🚨  Are you using CICD pipeline? Recently, a US -based hacking group identified one of the misconfiguration in the Jenkins servers and based on that, they have deployed the cryptojacking -based module into the cloud servers. They have made $1 million within two weeks of that. So how did they do this? Finding that misconfigured Jenkins server is not a rocket science. You can simply go and search in a Google Docs, Nmap and Omodad. The trick followed by hackers are like, they identify publicly exposed Jenkins of any cloud based company or cloud dependent company and after that they are checking whether the anonymous logins are still enabled, if it is a CLI access is available in the sense and they will be pushed the groovy script with the base64 encoding so that the internal security mechanism would we get bypassed and this Ruby script will be getting to the Jenkins                           ...

Starting your journey to cloud services:  In this digital era, organizations are building their infrastructures and running their services in the cloud environment. As cloud services have a lot of advantages, the corporates integrate their new technologies more effectively into the cloud environment. Despite these, when it comes to security, danger is no stranger here due to it’s public accessibility. Over the recent years, the usage of cloud services had catapulted and plenty of information is being stored in the cloud environment. But parallelly, cloud based cyberattacks have also increased.  What is a cloud service? Cloud service is an online service that’s provided for users and clients to run and maintain their data and services in a portable environment. It’s functionalities include providing customized online access to applications, resources and services that’re managed by the cloud service providers.   Why to have a cloud service? For business needs, cloud e...

Introduction In Today's cloud-dominated environment, businesses are experiencing a profound transformation in how they operate and store their critical data. While the cloud offers unprecedented scalability, cost-efficiency, and accessibility, it also introduces new cybersecurity challenges. As organizations increasingly migrate their operations to the cloud, the need for a robust incident response and recovery strategy cannot be overstated. The purpose of this blog is to investigate the crucial role that cybersecurity teams play in managing incidents and ensuring the resilience of cloud-based operations. Discover why your cybersecurity team is your lifeline in the cloud era. Understanding Incident Response Tiers in cloud Preventive Measures for Cloud Security Tier 1 is focused on prevention and involves implementing measures that reduce an organization’s risk profile, such as patching software or installing network firewalls. These preventive measures are designed to stop attacks ...