How a ransomware attack unfolds

Process map by Brian. 12 steps, 1 layer. Tags: security, technology, cybersecurity.

  1. Attackers: Send a convincing phishing email
  2. An employee: Clicks the link or opens the file
  3. Attackers: Malware installs and steals passwords
  4. Attackers: Moves quietly through the network for days or weeks
  5. Attackers: Copies sensitive files for a second threat
  6. Attackers: Encrypts files on many computers at once
  7. IT and security team: Spots the lockout and cuts off the network
  8. The company leadership: Are there clean, tested backups?
  9. IT and security team: Rebuild from backups
  10. The company leadership: Report it, investigate and fix the weak points
  11. The company leadership: Decide whether to pay, with no guarantee the files return
  12. Attackers: Threaten to leak the stolen files

Read this process as Markdown

$Security $Technology $Cybersecurity All process maps