Security News > 2020 > June > Avon cosmetics suffers “cyber incident” – but was it ransomware?

Avon cosmetics suffers “cyber incident” – but was it ransomware?
2020-06-17 16:58

You may have heard the name DoppelPaymer before - along with numerous other ransomware gangs including Maze and Revil, the crooks behind this one don't just scramble your data, they steal copies of it first.

As we've regularly explained in Naked Security, many ransomware attacks turn out to be the final chapter in a sometimes lengthy series of malware infections, where each infection is used as the vehicle to implant the next.

As far as we can tell, the crooks behind Emotet aren't themselves interested in logging your keystrokes, stealing your files or zapping you with ransomware.

In other words, even if a ransomware attack happens on your network - whether or not the actual data scrambling takes place or not - you might already have had crooks wandering around inside your business for weeks or even months.

In other words, this isn't so much about keeping ransomware out but about keeping out any threats that might ultimately lead to ransomware.


News URL

https://nakedsecurity.sophos.com/2020/06/17/avon-cosmetics-suffers-cyber-incident-but-was-it-ransomware/