Tag Archive: Incident Response

Where is my $6M?

July 31, 2017 11:31 pm

As a corporation’s accountants reconciled their weekly balance sheets, something was very off.  Over $6M was missing from accounts receivable.  The accountants called accounts receivable to ask if they had received several specific... Click to Read More

Hey, you, get off of my cloud.

July 31, 2017 11:30 pm

A large corporation had great expectations for their next digital advertising campaign. This time, they wanted to try cloud technology. So, they signed up with Amazon Web Services (AWS). Because it was the... Click to Read More

Ransomware: Turning off the power.

July 31, 2017 9:23 pm

At 11:59 one dark night, a power company’s computers started sending out alerts. Suddenly, they had stopped communicating with each other.  As the power company’s IT staff hurriedly started an emergency investigation, it... Click to Read More

Preventing Petya – stopping the next ransomware attack

June 28, 2017 8:02 am

Check Point’s Incident Response Team has been responding to multiple global infections caused by a new variant of the Petya malware, which first appeared in 2016 and is currently moving laterally within customer... Click to Read More

WannaCry – Paid Time Off?

May 14, 2017 11:29 am

Let us open with a TL;DR – DO NOT pay the ransom demanded by the WannaCry ransomware! Now, let us explain why: As of this writing , the 3 bitcoin accounts associated with... Click to Read More

Global Outbreak of WannaCry

May 12, 2017 12:08 pm

[Updated May 17, 2017] On May 12, 2017 the Check Point Incident Response Team started tracking a wide spread outbreak of the WannaCryp ransomware. We have reports that multiple global organizations are experiencing... Click to Read More