Did it move laterally because of patching or credentials?

Sign up, and you can make all message times appear in your timezone. Sign up

Report problem with this ad

May 15, 2019
6:14:26am

kapcreations All-American

Did it move laterally because of patching or credentials?

Report problem with this ad

kapcreations

Bio page: kapcreations
Joined: Aug 17, 2010
Last login: Apr 19, 2024
Total posts: 4,625 (19 FO)

Report problem with this ad

Messages

Author

Time

No one died or got divorced, but the last 80 hours have been awful.

Belboz

5/14/19 12:35am

What kind of IT work do you do?

5/14/19 12:47am

Systems guy.

Belboz

5/14/19 2:26am

If your company is that short staffed, time for a new job

5/14/19 5:09am

This. My lil' brother is in computers, doesn't have a degree but has lots of certifications, and he just switched jobs

Smack'sWife

5/14/19 6:24am

I've left this company twice in the last 20 years only to return.

Belboz

5/15/19 2:23am

We lost 800 servers on Friday night and have to rebuild

Belboz

5/15/19 2:09am

Was there a disaster?

5/14/19 6:21am

Exactly, if this is the norm and not a disaster he needs to find a new company

fredy

5/14/19 6:40am

I think he mentioned a last week they were dealing with a massive virus

Duke Silver

5/14/19 8:08am

Ransomeware. I'm months shy of 50 and worked my whole career in IT

Belboz

5/15/19 2:17am

Did it move laterally because of patching or credentials?

5/15/19 6:14am

How much did the ransomware guys want for decrypting those servers?

Veracruz

5/15/19 6:53am

That's a cycle you never want to enter. Better to take the brunt and restore

VACOUGFAN

5/15/19 8:45am

Yeah, don't even entertain the thought.

Squeegee

5/15/19 8:55am

I know of two different companies who paid, one $2500 the other $50,000.

Veracruz

5/16/19 10:29am

I never cared enough to find out. i'm sure it would have been a payment plan

Belboz

5/15/19 11:46am

Windows 2008? Almost impossible to stop people from hacking if they make it past

CougarAndMerlin

5/15/19 7:25am

We still had about 200 2008.

Belboz

5/15/19 11:48am

well, we did have a good percentage of 2008 unaffected. all 2012 were killed.

Belboz

5/15/19 3:16pm

As soon as a domain admin hash is pulled from a 2008, all other servers

CougarAndMerlin

5/15/19 3:24pm

lol. yeah, reboot a server just like that...

Belboz

5/15/19 5:15pm

How is that specific to 2008?

5/15/19 5:34pm

2008 is susceptible to extracting password hashes out of memory.

CougarAndMerlin

5/15/19 10:41pm

AND despite having regular PCI audits, our domain admins list was out of control

Belboz

5/15/19 11:15pm

Yucky

5/14/19 1:38am

Report problem with this ad

Posting on CougarBoard

In order to post, you will need to either sign up or log in.

Report problem with this ad