The Trinidad and Tobago Cyber Security Incident Response Team published a post on October 27, 2020, about the increase in ransomware attacks targeting public and private entities in Trinidad and Tobago.
The Trinidad and Tobago Cyber Security Incident Response Team (TT-CSIRT) advises public and private entities to be aware of the increasing ransomware attacks. The TT-CSIRT elaborated on the multiple attack vectors and the countermeasures for these vectors.
Key Points:
- Phishing emails with infected attachments or links, compromising user credentials, and exploiting system vulnerabilities are a few common attack vectors ransomware commences through, according to the TT-CSIRT.
- The TT-CSIRT states that attackers threaten to publish or display the critical data to the public if ransom demands are not met. However, even if the company pays the ransom it does not assure the termination of attacks and/or retrieving of sensitive data.
- In the event of a ransomware attack immediately remove the affected system from all networks and contact the Trinidad and Tobago Cyber Security Incident Response Team for assistance.
Reference: ttcsirt.gov.tt
Contributed by: Contributed by Kyle Sterling from Jamaica. Kyle is a member of our Caribbean Cyber Support Team (CCST) initiative on Discord. CCST is a collaborative group on the Discord platform for Caribbean people interested in IT, from beginners to experts.
If you’re from the Caribbean, learn more and join the group by visiting caribbeancst.org.