Curious...
How can the security measures not notice 190 GB being pulled?
Canada's Trans-Northern Pipelines has allegedly been infiltrated by the ALPHV/BlackCat ransomware crew, which claims to have stolen 190 GB of data from the oil distributor. ALPHV added Trans-Northern to its blackmail site on Tuesday and said the purloined files include "all important information." Presumably the crew wants …
How can huge social media companies, or companies storing very private data (23andme), not notice credential stuffing attacks? That’s probably easier to spot than large amounts of data leaving your network but you have to be watching for it. Until companies are made to pay for obvious security failures, they will only add basic monitoring after a successful attack. My employer invested the time and money to enable 2FA for domain access two weeks after ransomware destroyed our network. Prior to that it was too expensive and inconvenient. If there were financial penalties (or even CEO jail time - never happen) for poor security then maybe every IT department would have a security professional (who is invited to project meetings and listened to).
Is that sarcasm? I hope it's sarcasm.
I just pulled the logs from my work laptop VPN client. I average about 250GB recieved traffic a day, and about 25GB back to the server. 5 days a week, 48 weeks a year... If I were to average my use across all the people in my position within the company, it's going to be in the range of about 27 Terabytes per day of VPN traffic. An IT dept. "not seeing" 190GB is pretty easy. Hell, I've got flash drives bigger than that to bring files to and from the office.
This post has been deleted by its author
I have no pity at all for the owners of any important infrastructure , machinery , connected to the public internet at all.
They know crackers will do what they do best , crack their security and make as much damage as they can.
It's negligence at a whole new level.
Don't blame crackers. Blame the companies for putting important infrastructure on a public network.