I have been speaking with business owners and teams about this very threat for the past year. Once we started performing regular pen test and review with our clients the proclivity we humans have to store information in unsecure ways became obvious....
We typically see 300+ passwords discoverable on a network environment not currently utilizing modern password management. The nasty thing about this ransomware variant is that once it is engaged with the system it exfiltrates that very password data most of us are not thinking about. Not sure what I mean? Does your browser autofill any login information for you? THAT information is being stolen by this new attack. Very sneaky, very dangerous.
One more reason to move your team to a modern password management system ASAP.
Harden the Target, Stay Vigilant!
#realtechsupport #realcyber
