Tag Archive for: recovers

Häfele Recovers From Ransomware Using SASE

/in


Following a well-publicised ransomware attack in February 2023, Häfele was able to recover in record time by moving to Cato SASE Cloud. The international manufacturer and supplier of furniture fittings, architectural hardware and lighting products rebuilt its 50+ country, 180-site network in under 30 days.

“When your network is down from a cyberattack, every minute counts, and you can’t afford to bring back a partially secured network. You have one shot to do it right and fast,” said Daniel Feinler, CISO, Häfele.

“The deployment speed with Cato SASE Cloud was a game changer. By working with Cato Networks, we were able to bring up the entire network with full security in less than a month. It was so fast that a competing SASE vendor didn’t believe us. Cato made it possible.”

“Agility and security are core requirements for every enterprise, and especially in times of crisis,” says Shlomo Kramer, CEO and co-founder, Cato Networks. “We were happy to support Häfele confront such a challenge, and we appreciate their trust in Cato SASE Cloud as their new global network and security infrastructure. Our teams collaborated efficiently and professionally, setting a world record in a large-scale SASE deployment project.”

Häfele Finds The Right SASE Partner

When Häfele, a German family enterprise based in Nagold, Germany, suffered a severe ransomware attack, it forced the company to shut down its computer systems and disconnect them from the internet. At the time, Häfele was in an RFP process to select a SASE vendor.

“We had finished a proof of concept with Cato and were getting ready to move to the next SASE provider when the ransomware attack occurred,” said Mike Bretz, Global Team Lead of Network, Häfele. Instead, the Häfele team turned back to Cato.

Over the next four weeks, Häfele worked with Cato and restored its IT systems. Häfele installed Cato Sockets, Cato’s Edge SD-WAN device, at 180+ sites across 50+ countries such as Argentina, Finland, Myanmar (Burma), and South Africa.

A global, unified security policy was configured to help prevent another attack, and 8,000 employees regained secured access to the internet and enterprise resources, including 4,000…

Source…

DOJ Recovers Most of Colonial Pipeline’s Ransom Payment

/in


Photo: POOL/AFP via Getty Images

Close to a month after Colonial Pipeline paid hackers the equivalent of $4.4 million in order to restore services for their massive gasoline operation, the Department of Justice announced that it had recovered the majority of the ransom payment.

After hackers affiliated with a group known as DarkSide locked Colonial out of their computer system leading to fuel shortages throughout the East coast, the energy firm decided in early May to pay the Russia-based group 75 Bitcoin, the equivalent of $4.4 million at the time. On Monday, the DOJ announced that 63.7 Bitcoin had been seized; while that represents 85 percent of the ransom payment, the value is now at $2.3 million, due to a fall in the cryptocurrency’s price in May.

“By going after the entire ecosystem that fuels ransomware and digital currency, we will continue to use all of our tools and all of our resources to increase the costs and the consequences of ransomware attacks and other cyber-enabled attacks,” Deputy Attorney General Lisa Monaco said at a press conference on Monday, referring to the type of the attack executed against Colonial. The FBI also revealed Monday in an affidavit that they were holding a key to unlock a bitcoin wallet that had most of the funds, although they did not announce exactly how they were able to find the key; Bitcoin transactions are designed to be untraceable. According to Reuters, “the bureau had tracked the bitcoin through multiple wallets, using the public blockchain and tools.”

By announcing that the Department of Justice was going after the “entire ecosystem” of ransomware attacks, Monaco suggested an escalation of the tactics used by the government to stop the hacking that has disrupted many business sectors this year. In April, the DOJ created a Ransomware and Digital Extortion Task Force to mitigate the breaches that have emerged as a national security threat over the past year. In an internal memo launching the initiative, the department will target “the entire criminal ecosystem around ransomware, including…

Source…

US Recovers Millions In Bitcoin Paid During The Colonial Pipeline Attack

/in


U.S. officials announced in a press conference Monday afternoon the successful recovery of some of the funds paid in the recent Colonial Pipeline hack. Deputy Attorney General Lisa Monaco of the Department of Justice noted that the scope of the investigation involved “…going after an entire ecosystem that fuels ransomware and digital extortion attacks including criminal proceeds in the form of digital currency.” Monaco declared, “…we will continue to use all of our tools and all of our resources to increase the cost and the consequences of ransomware attacks and other cyber-enabled attacks.” Paul Abbate, the deputy director of the FBI, said the bureau successfully seized the ransom funds from a bitcoin wallet that DarkSide used to collect Colonial Pipeline’s payment.

Colonial Pipeline temporarily shut down its operations on May 7 after Russian-based criminal hackers from the organization DarkSide broke into its computer system, stalling a company that provides almost half of the fuel to the East Coast of the U.S. While Colonial Pipeline ended up paying $4.4 million in digital currency, the amount that was recovered today was not revealed.

The United States Department of Justice had recently instructed the U.S. Attorney’s Offices across the country to coordinate cases involving ransomware, cyberattacks, and illicit marketplaces with a newly created ‘Ransomware and Digital Extortion Task Force’. According to Monaco, the Task Force was established to investigate disrupt, and prosecute ransomware and digital extortion activity. “This is the Task Force’s first operation of its kind,” said Monaco.

Message To U.S. Corporations: Improve Your Computer Security Now

According to Monaco, these types of ransomware are more diverse, sophisticated, and dangerous to which no organization is immune. Monaco specifically addressed U.S. corporations in the press conference that the , “…threat of…

Source…

Hacker Team Recovers Deleted iPhone Photos

/in

During their demo the team recovered a photo from an iPhone’s Recently Deleted section. Users can go into this section of Photos to see photos they have deleted, and also recover them. But it’s not ac…
mac hacker – read more