Anatomy of a Targeted Ransomware Attack
Mar 23, 2021James Espinosa
Summary
This post details the evolution of targeted ransomware and Ransom DDoS attacks, including common initial compromise vectors (RDP/VPN compromise, unpatched vulnerabilities, spear-phishing). It highlights how Cloudflare's products like Access, WAF, Gateway (with AV scanning), and RBI can be used to prevent, detect, and respond to these threats. It also touches on the importance of multi-factor authentication and offsite backups.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack