Скачать или смотреть CryptoLocker Ransomware Variants Are Lurking “In the Shadows;” Learn How to Protect Against Them

Recently, attackers employing a CryptoLocker variant have been removing volume shadow copies on systems, disallowing the users from restoring those files, and then encrypting the files for ransom. If a user cannot recover from backups, he/she is at the attacker’s mercy. In this technical session, we’ll discuss the ins and outs of shadow copies, reveal how attackers are using them to encrypt files for ransom, and then discuss ways you can quickly - and easily - detect and respond to these kinds of attacks.

Ryan Nolette, Security Operations Lead, Carbon Black


Ryan Nolette, now the security operations lead, was a senior threat
researcher and senior incident response consultant at Bit9 + Carbon Black and draws from more than a decade of intense and active incident response, threat research, and IT experience to add a unique perspective of technical expertise and strategic vision to Bit9 + Carbon Black. Prior to joining Bit9, Ryan was a technology risk analyst for Fidelity Investments, where he was the malware subject-matter expert for their cybersecurity group and focused on signature verification and placement for all IPS across the world, and provided non-signature-based malware detection and prevention through manual auditing and automated tools that he wrote. Ryan earned a bachelor’s degree in Information Security and Forensics from the Rochester Institute of Technology and is constantly looking to learn new skills and technologies.