Subject: Threat hunting in action: How pirated software paved the way for Ryuk ransomware
From: Sophos <[email-masked]>
To: [email-masked]
Date: Thu, 17 Jun 2021 01:06:31 -0400

"Sophos"     

If you have trouble reading this message Click Here <https://app.go.sophos.com/e/es?s=1777052651&e=1506047&elqTrackId=e279c511881c468c9c136eeb565cb711&elq=9ca3452ab6694c2ea33863585ee4a84d&elqaid=17264&elqat=1&elqcst=272&elqcsid=1341> | Whitelist Us <https://app.go.sophos.com/e/er?s=1777052651&lid=46&elqTrackId=cfa46be1529d4ce5a72c77f7f986b005&elq=9ca3452ab6694c2ea33863585ee4a84d&elqaid=17264&elqat=1&elqcst=272&elqcsid=1341>.          

"Sophos"                   <https://app.go.sophos.com/e/er?s=1777052651&lid=12&elqTrackId=b74fda245bdd4ca0ba798e2b8b261604&elq=9ca3452ab6694c2ea33863585ee4a84d&elqaid=17264&elqat=1>                                      

"Sophos"                                                

How pirated software paved the way for Ryuk ransomware              

Read the full story <https://app.go.sophos.com/e/er?s=1777052651&lid=22268&elqTrackId=4c6fc9ff82aa4f87abb9c9089e72d4d0&elq=9ca3452ab6694c2ea33863585ee4a84d&elqaid=17264&elqat=1>              

Sophos’ Rapid Response <https://app.go.sophos.com/e/er?s=1777052651&lid=22269&elqTrackId=2415fc9ea04844658ada7fafd163920d&elq=9ca3452ab6694c2ea33863585ee4a84d&elqaid=17264&elqat=1> team was recently brought in to contain and neutralize an attack on a life sciences research institute involving Ryuk ransomware. 

The Ryuk attack cost the institute a week’s worth of vital research data, as well as the time and effort to rebuild their computer and server files from the ground up.

After the incident has been contained, the Rapid Response team retraced the attackers’ steps. Their investigation led them back to a single human mistake: the use of pirated software.

Read the full story <https://app.go.sophos.com/e/er?s=1777052651&lid=22268&elqTrackId=40ec8d63f8c44a43b7ecca46194b4ca2&elq=9ca3452ab6694c2ea33863585ee4a84d&elqaid=17264&elqat=1> to learn how the attack unfolded and get best practices to help defend against network access abuse.

Read the full story <https://app.go.sophos.com/e/er?s=1777052651&lid=22268&elqTrackId=e3d16e9610824bd3b46794233ce9ba9d&elq=9ca3452ab6694c2ea33863585ee4a84d&elqaid=17264&elqat=1>              

"LinkedIn" <https://app.go.sophos.com/e/er?s=1777052651&lid=11499&elqTrackId=750daa5d49e84a1498df50c011c32e48&elq=9ca3452ab6694c2ea33863585ee4a84d&elqaid=17264&elqat=1&elqcst=272&elqcsid=1360>                                   "Twitter" <https://app.go.sophos.com/e/er?s=1777052651&lid=10124&elqTrackId=2fd2bd73d258432ab7b24bdfe95c5369&elq=9ca3452ab6694c2ea33863585ee4a84d&elqaid=17264&elqat=1&elqcst=272&elqcsid=1360>                                   "Facebook" <https://app.go.sophos.com/e/er?s=1777052651&lid=8&elqTrackId=8ef1de275b2e4f54ad59502942ff81c0&elq=9ca3452ab6694c2ea33863585ee4a84d&elqaid=17264&elqat=1&elqcst=272&elqcsid=1360>                                   "YouTube" <https://app.go.sophos.com/e/er?s=1777052651&lid=7&elqTrackId=2d753c00a5ee4e4889a1d9cd2ba6711b&elq=9ca3452ab6694c2ea33863585ee4a84d&elqaid=17264&elqat=1&elqcst=272&elqcsid=1360>             

This email was sent to [email-masked] by Sophos Limited.

Privacy Policy <https://www.sophos.com/en-us/legal/sophos-group-privacy-policy.aspx?elqTrackId=d529843fd4f04f9191e3d11a8ded080f&elq=9ca3452ab6694c2ea33863585ee4a84d&elqaid=17264&elqat=1&elqCampaignId=123926&elqcst=272&elqcsid=5115> | Unsubscribe <https://lp.sophos.com/email-preferences-v2?Id=CSOPH000016160978&elqTrackId=8f0f602c431e49f39a509b21fef6b74a&elq=9ca3452ab6694c2ea33863585ee4a84d&elqaid=17264&elqat=1&elqCampaignId=123926&elqcst=272&elqcsid=5115> | © 2021 Sophos Limited

The Pentagon, Abingdon Science Park, Abingdon, Oxfordshire, OX14 3YP, UK • 2096520                         
We use cookies and other similar tracking technologies in this email. Learn more at:                         https://www.sophos.com/en-us/legal/cookie-information.aspx <https://www.sophos.com/en-us/legal/cookie-information.aspx?elqTrackId=fc00a8f78aa5430b8a8e190be1b3e416&elq=9ca3452ab6694c2ea33863585ee4a84d&elqaid=17264&elqat=1&elqCampaignId=123926&elqcst=272&elqcsid=5115>