Ransomware attacks have increased significantly over the past year. On Tuesday, February 22nd, join Jeremy Rasmussen, Chief Technology Officer at Abacode, and renowned ransomware negotiator and CEO of GroupSense, Kurtis Minder, to get behind the scenes exclusive access and insight into what happens after a ransomware attack.
Editorial Team
Recent posts by Editorial Team
Ask Me Anything Webinar with Abacode
By Editorial Team on Dec 28, 2021 11:30:04 AM
Topics: News Webinar Ransomware Events
AIMA APAC Webinar: Cyber security x Ransomware
By Editorial Team on Dec 27, 2021 2:13:08 PM
On January 18th, Kurtis Minder, GroupSense CEO, will join AIMA for their APAC Webinar: Cyber security x Ransomware: Squid Games Edition.
Topics: Webinar Events
NYLIB: Cyber Security Panel Discussion
By Editorial Team on Dec 27, 2021 1:46:16 PM
GroupSense CEO Kurtis Minder, will join NYLIB as a keynote speaker highlighting his experience in the cyber security space. Afterwards, NYLIB will host a panel discussion focused on cyber security risks facing banks, current trends, and best practices.
Topics: Webinar Events
Five Ransomware Predictions for 2022
By Editorial Team on Dec 22, 2021 9:30:00 AM
In 2021, we saw a steady rise in the number of ransomware attacks. It’s projected that global ransomware damage costs will reach $20 billion by the end of 2021. Nearly every week, you hear of a new high-profile catastrophic breach, but organizations of all sizes have been critically impacted by ransomware and cyber threats.
Topics: Blog Ransomware
The Bad Actors – The Extortion Economy
By Editorial Team on Dec 17, 2021 2:53:29 PM
Kurtis Minder, Ransomware Negotiator and GroupSense CEO, was featured on MIT Technology Review & ProPublica's: The Bad Actors – The Extortion Economy podcast. This series is hosted by Meg Marco and produced by Emma Cillekens, Tate Ryan-Mosley and Anthony Green. The podcast dives into the criminal world where the stakes are high, but the methods are increasingly business-like and meet the people who interact with the ransomware hackers.
Topics: News Ransomware Podcast
Impact of CVE-2021-44228 Apache Log4j Vulnerability
By Editorial Team on Dec 16, 2021 3:42:30 PM
GroupSense performed a deep and dark web investigation into the critical remote code execution (RCE) zero-day impacting the Apache Java-based logging utility Log4j (CVE-2021-44228). This high severity vulnerability is already being actively exploited in the wild, per numerous public reports. The attack vector is extremely trivial for threat actors to exploit, requiring only a single string of code, and impacts software products from numerous vendors. The US Cybersecurity and Infrastructure Security Agency is maintaining an updated list of affected vendors.
Topics: Blog
CynergisTek's Healthcare Ransomware Bootcamp Recap
By Editorial Team on Dec 13, 2021 1:19:21 PM
Cyber Resilience is like muscle – training helps you achieve more. In this Ransomware Bootcamp seminar, you will learn about the changes to cyber insurance and how to prepare for them, an inside perspective from a ransomware negotiator, and steps on how to train your resilience muscle to strengthen your defensive and offensive strategies.
CynergisTek, Lockton Companies, and GroupSense provided insider insights on how to stay ahead of the curve and protect yourself from being the next target.
"The healthcare industry lost an estimated $25 billion to ransomware attacks in 2019," SafeAtLast.
Elissa Doroff, Managing Director & Cyber Technical Leader at Lockton Companies, presented "Cyber Insurance - The Effects of Ransomware". Ransomware attacks accounted for 41% of all filed cyber insurance claims in the first half of 2020, according to a report by Coalition. To keep up with the cost, and rise in claim occurrence, cyber insurance providers are implementing compliance requirements that, depending on compliance capability, might increase your coverage cost or deem you ineligible to be insured at all.
Elissa Doroff covered the following in her session:
- Background of the always-evolving cyber insurance industry. Once deemed an organizational “nice to have”, finds itself in a pivotal point that may change the insured’s coverage decision forever.
- A walkthrough of the top 10 cybersecurity compliance standards, and a deep dive into why they are important, and what they mean.
- What happens once you become insured. Including best practices to work with your insurance company, how cyber insurance works, a look into filing a claim, and a broker’s perspective on breach response.
Kurtis Minder followed Elissa and presented "Real Life Perspectives from a Ransomware Negotiator". No one ever expects it to happen to them, but with ransomware and cybercrime on the rise, it’s more likely than ever to discover that ransomware has locked down your system and cybercriminals are holding your data hostage.
"2020 Healthcare attacks involved the theft or exposure of the protected health information of at least 18,069,012 patients," HIPPA Journal.
Kurtis Minder covered the following in his session:
- What most people don’t realize about ransomware and the cybercriminals that run these exploits
- Immediate do’s and don’ts if your systems are being held captive
- How to limit potential damage like data loss, overpaying threat actors, tarnished brand reputation, and compliance violations
- Notable stories from the field
Below are some interesting healthcare specific stats/issues from Kurtis's session:
- Connected IoMT: There are 430 million connected medical devices worldwide. The number rises every day, creating an expanded attack surface.
- Mergers and Acquisitions (M&A): It is not uncommon for healthcare organizations to have many mergers and acquisitions. An organization might be more vulnerable if the acquired organization doesn’t have up-to-date records of all its assets.
- 2020 Healthcare Ransomware: More than a third of healthcare organizations were hit by a ransomware attack in 2020 and of those, 65% said the cybercriminals were successful in encrypting their data.
- Unpatched Systems: Many health care institutions use unpatched or outdated hardware devices and software, which are prone to ransomware attacks.
Mac McMillan, President & CEO at CynergisTek closed out the event by highlighting the crucial need for organizations to shift towards cybersecurity resilience, and away from a compliance/preparation-only mindset. Mac discussed key findings from Elissa and Kurtis’s sessions and tied it all together.
About Kurtis Minder:
Kurtis Minder is the CEO and co-founder of GroupSense, a leading provider in Digital Risk solutions. Kurtis built a robust cyber reconnaissance operation protecting some of the largest enterprises and government organizations. Kurtis has been the lead negotiator at GroupSense for ransomware response cases. He has successfully navigated and negotiated some of the largest ransomware, breach, and data extortion cases world-wide. With over 20 years in the information security industry, Kurtis brings a unique blend of technical, sales and executive acumen.
Topics: News Webinar Ransomware Events
The Rise of the Geopolitical Hack
By Editorial Team on Dec 10, 2021 9:39:28 AM
The residue of ransomware is infiltrating our psychology and pocketbooks. Is politics next?
Earlier this year, GroupSense spoke to Erika Hellerstein, Senior Reporter at Coda, about connecting links between disinformation and ransomware, as well as GroupSense's backstory on how they became ransomware negotiators.
Topics: News
Activist Movements Drive Misinformation Mayhem
By Editorial Team on Dec 3, 2021 10:50:27 AM
Bryce Webster-Jacobsen, Director of Intelligence Operations at digital risk protection / ransomware negotiators GroupSense, was a featured in Axios' article "Activist Movements Drive Misinformation Mayhem. Bryce spoke to Sara Fischer about anti-vaccination conspiracy theories and how they are becoming dangerous spreaders of misinformation.
Topics: News
Prioritizing Cybersecurity: Tips to Better Protect Your Data
By Editorial Team on Dec 1, 2021 3:49:00 PM
GroupSense does some of the largest negotiations for ransomware. Ransomware is a quick and easy path to revenue for criminals. Unfortunately, ransomware isn’t always the first play in a criminal’s playbook. They usually have been in your network for a while and deploy ransomware after they’ve accessed all your data. GroupSense’s team of experienced negotiators developed cybersecurity tips to help reduce your risk.