Archive

Ransomware

Strengthening Brazil’s Cybersecurity: The Brazil Ransomware Task Force

Strengthening Brazil’s Cybersecurity: The Brazil Ransomware Task Force

In September, IST Senior Director for International Cyber Engagement Elizabeth Vish and Future for Digital Security Associate Gigi Flores Bustamante attended the first convening of Brazil’s Ransomware Task Force, co-organized by the Ministry of Foreign Affairs of Brazil, the Organization of American States, and IST. In this blog, Gigi shares her reflections on the conference and launching the Brazil RTF.

Brazil, deter, disrupt, Organization of American States, prepare, Ransomware, respond

November 21, 2024

Cybersecurity Awareness Month at IST: Tips, Tricks, and Takes from the Team

Cybersecurity Awareness Month at IST: Tips, Tricks, and Takes from the Team

Last month, we shared the IST team’s best tips, tricks, and takes in honor of Cybersecurity Awareness Month. IST Comms Associate Lillian Ilsley-Greene sat down with the team to get their insights on the most pressing cyber issues facing our world.

AI, cybersecurity, incentives, MFA, online safety, Ransomware, software

November 4, 2024

Q&A: IST at the International Counter Ransomware Initiative

Q&A: IST at the International Counter Ransomware Initiative

In this month’s edition of The TechnologIST, we sat down with Ransomware Task Force colleagues Future of Digital Security Associate Trevaughn Smith, Deputy Director for Digital Security Taylor Grossman, Senior Director for International Cyber Engagement Elizabeth Vish, and Chief Strategy Officer and RTF Executive Director Megan Stifel to learn about the Ransomware Task Force's ongoing support for the International Counter Ransomware Initiative.

CRI, cybersecurity, Public-private partnerships, Ransomware

October 25, 2024

IST joins the Public-Private Sector Advisory Panel of the Counter Ransomware Initiative

IST joins the Public-Private Sector Advisory Panel of the Counter Ransomware Initiative

This week, IST was honored to participate in the 2024 International Counter Ransomware Initiative (CRI), the fourth annual gathering of the world’s largest partnership to combat the threat of ransomware on a global scale. In our third year of participation, we are pleased to share that we are a member of the newly-launched Public-Private Sector Advisory Panel and to have joined fellow Advisory Panel members in formally addressing CRI members about the value of collaboration with industry in meeting the urgent need to combat ransomware.

announcements, counter ransomware initiative, Public-private partnerships, Ransomware, RTF

October 3, 2024

2023 RTF Global Ransomware Incident Map: Attacks Increase by 73%, Big Game Hunting Appears to Surge

2023 RTF Global Ransomware Incident Map: Attacks Increase by 73%, Big Game Hunting Appears to Surge

According to the Ransomware Task Force’s fourth Global Ransomware Incident Map, ransomware attacks increased 73% in 2023. Using Ecrime.ch data, the map analyzes incidents across 117 countries originating from 66 ransomware groups.

CL0P, incident map, ransom payments, Ransomware, Ransomware-as-a-Service

September 26, 2024

Plano de ação de defesa contra o ransomware

Plano de ação de defesa contra o ransomware

Plano de ação para as pequenas e médias empresas em matéria de mitigação, resposta e recuperação de programas de sequestro de dados

Blueprint for Ransomware Defense, cyber attacks, defense, Future of Digital Security, Portuguese, Ransomware, RTF

September 24, 2024

Prepare, Don’t Pay: A Quick-Start Guide to Defending Against Ransomware

Prepare, Don’t Pay: A Quick-Start Guide to Defending Against Ransomware

Written for the small business owner, this quick-start guide breaks down important components of the Blueprint for Ransomware Defense and its underlying core technical concepts, critical Safeguards and defensive measures, and explains how you can make the Blueprint work for your small- or medium-sized enterprise.

Blueprint for Ransomware Defense, Prepare Don't Pay, Ransomware, RTF, safeguards

August 7, 2024

Institute for Security and Technology and Cyber Threat Alliance Submit Comments on Cyber Incident Reporting for Critical Infrastructure Act

Institute for Security and Technology and Cyber Threat Alliance Submit Comments on Cyber Incident Reporting for Critical Infrastructure Act

IST and the Cyber Threat Alliance, along with co-signer Chainalysis, submitted comments on July 3, 2024 in response to the Cybersecurity and Infrastructure Security Agency’s Notice of Proposed Rulemaking on the Cyber Incident Reporting for Critical Infrastructure Act.

CIRCIA, critical infrastructure, cybersecurity, incident reporting, Ransomware, RFI

July 3, 2024

Meet the Ransomware Task Force Steering Committee

Meet the Ransomware Task Force Steering Committee

Central to the success of the Ransomware Task Force is the RTF Steering Committee, a group of senior-level leaders and experts in cybersecurity and technology law and policy, who provide support, guidance, and oversight on ongoing RTF lines of effort.

announcements, Ransomware, RTF Steering Committee

June 11, 2024

24 in ’24: Doubling Down on the Ransomware Task Force Recommendations

April 24, 2024 9:30 am

24 in ’24: Doubling Down on the Ransomware Task Force Recommendations

On April 24, 2024, IST's Ransomware Task Force hosted 24 in ‘24: Doubling Down on the Ransomware Task Force Recommendations to zero in on the 24 recommendations that have seen little to no progress and discuss how we might redouble our efforts to deter ransomware attacks through a nationally and internationally coordinated, comprehensive strategy; disrupt the ransomware business model and reduce criminal profits; help organizations prepare for ransomware attacks; and respond to ransomware attacks more effectively.

deter, disrupt, prepare, Ransomware, respond

April 24, 2024

Ransomware Task Force: Doubling Down

Progress Report, Report

Ransomware Task Force: Doubling Down

While the U.S. government and its partners made great strides in combating ransomware in 2023, attacks have only increased. Of the 48 recommendations made in the original RTF Report, our assessment remains unchanged from a year ago: only 24 have seen significant progress.

cybersecurity, incident reporting, ransom payments, Ransomware

April 24, 2024

Information Sharing in the Ransomware Payment Ecosystem: Exploring the Delta Between Best Practices and Existing Mechanisms

Information Sharing in the Ransomware Payment Ecosystem: Exploring the Delta Between Best Practices and Existing Mechanisms

IST's latest report pulls from a recent attack scenario exercise performed by the Ransomware Task Force's Payments Working Group, comparing the results to information sharing case studies including the Hive disruption operation, the Emotet botnet takedown, and the Colonial Pipeline ransom recovery.

Colonial Pipeline, cybersecurity, Emotet, Hive, ransom payments, Ransomware

April 17, 2024

Testimony: Held for Ransom: How Ransomware Endangers Our Financial System

Testimony: Held for Ransom: How Ransomware Endangers Our Financial System

On April 16, 2024, Chief Strategy Officer Megan Stifel testified before the House Committee on Financial Services Subcommittee on National Security, Illicit Finance, and International Financial Institutions for a hearing entitled, "Held for Ransom: How Ransomware Endangers Our Financial System."

financial services, ransom payments, Ransomware

April 16, 2024

Ransomware Roundup: The Latest on Cyber AtTax

April 15, 2024 11:00 am

Ransomware Roundup: The Latest on Cyber AtTax

What’s been going on in the world of ransomware? On April 15, IST adjuncts and RTF members Allan Liska, Silas Cutler, Jen Ellis, Marc Rogers, and Jason Kikta host a webinar to round up the latest in ransomware news, including data breaches, CIRCIA, and more.

cyber attacks, cybersecurity, Ransomware, TTPs

April 15, 2024

Roadmap to Potential Prohibition of Ransomware Payments

Roadmap to Potential Prohibition of Ransomware Payments

The Ransomware Task Force Co-Chairs present a roadmap to potential prohibition of ransomware payments with 16 milestones that, if pursued concurrently by government and the private sector, could reduce the need for a prohibition of ransomware payments in the first place or facilitate its eventual imposition.

ransom payments, Ransomware, roadmap

April 10, 2024

Public Private Partnerships to Combat Ransomware: An inquiry into three case studies and best practices

Public Private Partnerships to Combat Ransomware: An inquiry into three case studies and best practices

IST, in collaboration with the Global Forum on Cyber Expertise and in support of the International Counter Ransomware Initiative, examines three existing public-private partnerships to combat ransomware: Europol’s European Cybercrime Centre (EC3), the United States Joint Cyber Defense Collaborative (JCDC), and the Institute for Security and Technology’s Ransomware Task Force (RTF). What challenges did they face? What does an ideal public-private partnership look like?

CISA, cyber, EC3, European Cybercrime Centre, JCDC, Joint Cyber Defense Collaborative, PPPs, Public-private partnerships, Ransomware

March 27, 2024