Malware delivered • Launch processes
cmd.Exe • Copies Malware • Adds reg entry
Attempts to move laterally across Enterprise
Ransom Note Delivered
Send Email
Bypass spam filter
Hit user’s inbox
User clicks link
Connects with C&C
Encrypts files
AV Fails
ANATOMY OF A RANSOMWARE ATTACK
Made with FlippingBook - Online catalogs