The IT Nerd

GuidePoint Security has published the monthly GuidePoint Research and Intelligence Team’s (GRIT) Ransomware Report for May, which found several new branded groups entering the scene, contributing to a cumulative rise in the number of observed ransomware victims.

Key findings include:

• Four new ransomware groups observed, which claimed 67 victims in the past year and represent nearly 18% of the victim posts observed in May
• 28 observed groups reporting victims this month with a 13.57% increase in total affected organizations
• An unusual correlation between two groups that were previously considered unrelated
• Among the most frequently impacted industries, the most active groups were Lockbit, Alphv, and BianLian

You can read the report here.

GuidePoint Security has published its quarterly GuidePoint Research and Intelligence Team’s (GRIT) Q1 2023 Ransomware Report, which found a significant increase in public ransomware victims compared to Q4 2022 and new coercive tactics being deployed by ransomware groups as the RaaS ecosystem evolves.

Key Findings Include:

• A 25% increase in public ransomware victims compared to Q4 2022 and a 27% increase compared to Q1 2022.
• LockBit remains the most prolific ransomware threat group, while the rapid exploitation of a file-sharing application vulnerability brought Clop into a leading position.
• The data also revealed some shifts in the industries targeted by ransomware groups, with a 65% increase in observed victims in the legal industry and a 17% increase in publicly posted victims in the education sector.
• Novel coercive tactics such as releasing sensitive data, including graphic medical images, and DDoS attacks have been observed, increasing pressure on victims to consider payment.

You can read the report here.

GuidePoint Security has published its monthly GuidePoint Research and Intelligence Team’s (GRIT) Ransomware Report, which found that compared to January, February 2023 showed a heavy increase in ransomware activity in reported victims and the countries affected.

Key Findings Include:

• The most notable change was the increase in victim count by Lockbit which more than doubled. 
• The data also revealed some shifts in the industries targeted by ransomware groups, with significant increases seen across the Food and Beverage, Banking and Finance, and Engineering industry. 
• Ransomware groups targeted victims in nearly 50 countries in February, a steep increase from those attacked in January.

You can read the report here.

Drew Schmitt, Principal Threat Intelligence Analyst at GuidePoint Security, has released the company’s first GuidePoint Research and Intelligence Team (GRIT) Report: May 2022 Edition, spotlighting Lockbit and three emerging new players. 

The research investigates the most active ransomware threat groups, impacted countries, and industry verticals and reveals the rate of publicly posted ransomware victims per day for the last month. The analysis is accompanied by graphs that visually explore the data and statistics examined.  

The report makes for fascinating reading and is available here.

Recent numbers on the cybersecurity skills shortage shows more than 2.72 million open positions, with the global workforce needing to grow 65% to effectively defend organizations’ critical assets¹. GuidePoint Security, a cybersecurity solutions leader enabling organizations to make smarter decisions and minimize risk, today announced that it has created GuidePoint Security University (GPSU) as a training and development pipeline for developing critical cybersecurity skills and applying them to real-world solutions. 

GPSU is designed for individuals who either want to begin a career in cybersecurity or extend their current technical skills, including students, transitioning service members, and those who have been employed in other industries. GPSU also has an internship component, which is tailored to create an individualized experience based on the learner’s background and aptitude. During an internship, learners hone both their technical and soft skills, while mastering best practices around reducing customer cyber risk. To support transitioning military members, GuidePoint is authorized to conduct DoD SkillBridge, Career Skills Program and Hiring Our Heroes internships.  

Cybersecurity disciplines that are currently covered within GPSU include: Application Delivery, Application Security, Cloud Security, Governance, Risk & Compliance (GRC), Identity & Access Management, Network Security, Penetration Testing, Security Analytics, Security Automation, Security Operations, and Project Management.

The first admissions class (from May 23-August 12) is comprised of 17 students, who are either transitioning out of the military or attending a University, with varying degrees, including Cybersecurity, Computer Science, Computer Engineering, Information Systems, and Business. All GPSU learners will be provided a laptop, access to proprietary GuidePoint Security training materials, lab space and vouchers for industry certifications. In addition to these resources, all learners will be paired with a GuidePoint Security mentor, with service members receiving a veteran mentor to help with the transition to civilian life. 

Applications for the Fall Semester will open in early August and be posted on the GuidePoint Security careers page. For more information contact GPSU@guidepointsecurity.com. 

Source: 2021 (ISC)² Cybersecurity Workforce Study