1 00:00:00,053 --> 00:00:03,623 You found the backup wrap up your go-to podcast for all things 2 00:00:03,623 --> 00:00:05,963 backup recovery and cyber recovery. 3 00:00:06,413 --> 00:00:09,653 In this episode, we answer a question that gets searched tens 4 00:00:09,653 --> 00:00:10,973 of thousands of times every month. 5 00:00:12,083 --> 00:00:13,763 What is ransomware? 6 00:00:14,363 --> 00:00:20,033 Honestly, if uh, you think you know the answer, the game has probably changed. 7 00:00:20,483 --> 00:00:24,713 Today's attacks always, or almost always include what we call a double 8 00:00:24,713 --> 00:00:28,643 extortion attack, where they threaten to publish your dirty laundry. 9 00:00:28,823 --> 00:00:33,353 If you don't pay up, imagine the worst email anyone at your group has 10 00:00:33,353 --> 00:00:35,783 ever written on the evening news. 11 00:00:36,473 --> 00:00:38,363 We'll break down both types of attacks. 12 00:00:38,393 --> 00:00:40,718 Talk about why literally everyone is a target. 13 00:00:41,438 --> 00:00:47,558 And discuss why the odds of you getting hit are basically a hundred percent plus. 14 00:00:47,558 --> 00:00:51,878 I talk about my new book with, uh, WR, that I wrote with Dr. Mike Saylor. 15 00:00:52,628 --> 00:00:53,918 And, uh, I hope you enjoy it. 16 00:00:54,158 --> 00:00:58,208 By the way, if you don't know who I am, I'm w Curtis Preston, AKA, Mr. 17 00:00:58,208 --> 00:01:03,188 Backup, and I've been passionate about backup and recovery for over 30 years. 18 00:01:03,458 --> 00:01:03,968 Ever since. 19 00:01:03,968 --> 00:01:08,168 I had to tell my boss that there were no backups of the database that we just lost. 20 00:01:08,648 --> 00:01:09,818 I don't want that to happen to you. 21 00:01:09,878 --> 00:01:11,408 That's why I do this. 22 00:01:11,618 --> 00:01:16,028 On this podcast, we turn unappreciated admins into Cyber Recovery Heroes. 23 00:01:16,418 --> 00:01:18,308 This is the backup wrap up. 24 00:01:34,282 --> 00:01:35,602 welcome to the backup wrap up. 25 00:01:35,602 --> 00:01:39,622 I'm your host w Curtis Preston, AKA, Mr. Backup, and I have with 26 00:01:39,622 --> 00:01:41,902 me Prasanna, the subnet mask. 27 00:01:42,432 --> 00:01:43,852 Molly Andi, how's it going? 28 00:01:43,852 --> 00:01:44,862 Prasanna. 29 00:01:45,772 --> 00:01:47,992 Yeah, I probably deserved that. 30 00:01:48,022 --> 00:01:52,852 Uh, I fell down a YouTube rabbit hole and spent many, many, many, many hours 31 00:01:52,852 --> 00:01:58,402 and redid my home networking to make it look nice and spent way too much money. 32 00:01:59,122 --> 00:02:01,312 Oh, you spent a, oh, I didn't know you spent a bunch of money. 33 00:02:01,342 --> 00:02:03,232 You just said you like redid things. 34 00:02:03,262 --> 00:02:05,812 I just thought you just like, you know, move cables around or whatnot. 35 00:02:05,812 --> 00:02:12,202 no, it was also like buying a mini rack and a UPS and a NAS and a switch. 36 00:02:13,117 --> 00:02:16,507 Yeah, and some network cables to make it all look nice and 37 00:02:17,422 --> 00:02:17,842 Yeah. 38 00:02:18,307 --> 00:02:19,057 yeah, 39 00:02:19,207 --> 00:02:20,497 it looks really, really good, 40 00:02:20,752 --> 00:02:21,202 yeah. 41 00:02:21,832 --> 00:02:22,012 Yeah. 42 00:02:22,012 --> 00:02:23,002 You spent a few dollars. 43 00:02:23,242 --> 00:02:24,292 There was a few years ago. 44 00:02:24,292 --> 00:02:28,012 You may recall when I did, I had my, my wifi project 'cause I 45 00:02:28,012 --> 00:02:33,082 was tired of like my way too many smart devices that didn't have a, a wifi. 46 00:02:33,712 --> 00:02:36,442 A reliable wifi connection and that, that's, that worked out 47 00:02:36,442 --> 00:02:37,612 really well for me since then. 48 00:02:37,672 --> 00:02:39,322 That was like a few years ago now. 49 00:02:39,332 --> 00:02:39,622 Yeah. 50 00:02:39,637 --> 00:02:40,057 Yeah, I 51 00:02:40,057 --> 00:02:40,657 remember that. 52 00:02:40,822 --> 00:02:41,092 yeah. 53 00:02:41,092 --> 00:02:44,302 So it's been nice to, to have a reliable wifi connection. 54 00:02:44,302 --> 00:02:45,742 So I wish you all the best. 55 00:02:47,662 --> 00:02:52,102 so what, what do you think if you woke up one morning, you know, you 56 00:02:52,102 --> 00:02:57,772 went into work and then all your computers have a little screen on 57 00:02:57,772 --> 00:03:00,142 'em that start talking about Bitcoin? 58 00:03:01,942 --> 00:03:04,492 Yeah, I would just turn around and walk right out. 59 00:03:09,472 --> 00:03:10,402 Yeah. 60 00:03:10,492 --> 00:03:11,062 Yeah. 61 00:03:11,062 --> 00:03:13,252 gonna be one of those not so productive days. 62 00:03:13,252 --> 00:03:13,402 How 63 00:03:13,492 --> 00:03:14,332 Yeah. 64 00:03:14,362 --> 00:03:17,212 You know, I think about your, your current employer, they've 65 00:03:17,212 --> 00:03:18,922 got one or two computers. 66 00:03:19,432 --> 00:03:20,422 Can you imagine? 67 00:03:20,782 --> 00:03:21,352 Right. 68 00:03:21,712 --> 00:03:23,452 Uh, yeah. 69 00:03:23,452 --> 00:03:28,072 I mean, the bigger you are as a company, the bigger target you are 70 00:03:28,277 --> 00:03:35,687 I agree with that statement, but I also think that that's sort of the danger, 71 00:03:36,142 --> 00:03:36,492 Uhhuh? 72 00:03:36,737 --> 00:03:39,257 in that situation, because smaller companies might think, Hey, 73 00:03:39,257 --> 00:03:40,727 they're going after the big guys. 74 00:03:41,057 --> 00:03:42,467 I don't need to worry about this. 75 00:03:42,467 --> 00:03:43,577 But as we all know, 76 00:03:44,177 --> 00:03:46,817 everyone is a target. 77 00:03:47,612 --> 00:03:50,592 Yeah, we're talking of course about ransomware. 78 00:03:50,952 --> 00:03:52,482 I think that's, is that how it's pronounced? 79 00:03:52,542 --> 00:03:53,472 Ransomware? 80 00:03:54,132 --> 00:03:59,682 Um, and, uh, we're, you know, I, I thought we'd, with the upcoming release of. 81 00:04:00,657 --> 00:04:01,677 My little book here. 82 00:04:01,737 --> 00:04:06,177 By the way, for those of you watching us, uh, or listening to us on, uh, 83 00:04:06,177 --> 00:04:09,477 you know, apple Podcasts or whatever, you can actually watch us on YouTube 84 00:04:09,477 --> 00:04:14,907 and you get to see, I've now got wall art with the picture of my upcoming 85 00:04:15,147 --> 00:04:17,637 book that I wrote with, uh, Dr. 86 00:04:17,637 --> 00:04:18,387 Mike Saylor 87 00:04:18,927 --> 00:04:21,237 Learning Ransomware Response and Recovery. 88 00:04:22,347 --> 00:04:24,957 Uh, it's a. Lizard? 89 00:04:26,067 --> 00:04:26,247 I don't 90 00:04:26,592 --> 00:04:26,832 No. 91 00:04:26,832 --> 00:04:28,392 Have you named the lizard? 92 00:04:28,647 --> 00:04:31,467 Oh, If I give it, you know, I've never named any of the other ones. 93 00:04:31,467 --> 00:04:36,417 Like, you know, I've got the garal over here and I got the seven banded armadillo. 94 00:04:36,417 --> 00:04:37,317 I don't have, 95 00:04:37,632 --> 00:04:39,042 I think you should name them. 96 00:04:39,417 --> 00:04:40,017 you think I should 97 00:04:40,017 --> 00:04:40,342 name 'em? 98 00:04:40,992 --> 00:04:41,502 think so. 99 00:04:41,502 --> 00:04:41,562 I. 100 00:04:41,872 --> 00:04:45,397 I'm gonna call this one Prasanna. 101 00:04:46,677 --> 00:04:51,267 I knew you were going to do that, especially after you had named your Tesla. 102 00:04:52,107 --> 00:04:54,537 Yeah, my Tesla is called It's Prasanna's Fault. 103 00:04:55,227 --> 00:04:56,367 Uh, yeah, 104 00:04:56,577 --> 00:04:58,287 it it is your fault that I have a Tesla. 105 00:04:58,437 --> 00:05:03,957 100%. So, uh, yeah, we're talking about ransomware and I thought we'd do a 106 00:05:03,957 --> 00:05:08,937 little bit, you know, again, celebrate the, the upcoming release of the book. 107 00:05:09,357 --> 00:05:11,787 We're gonna, like, just, we're gonna be talking about ransomware for 108 00:05:11,787 --> 00:05:16,137 quite a bit, so if ransomware bores you, uh, you know, maybe you should 109 00:05:17,127 --> 00:05:18,507 go watch some YouTube. 110 00:05:18,657 --> 00:05:22,557 so I know that we're talking about ransomware in this episode, but 111 00:05:23,097 --> 00:05:27,627 I wonder how many people in it 112 00:05:28,067 --> 00:05:28,487 Mm-hmm. 113 00:05:28,947 --> 00:05:33,537 don't know what the word ransomware is in the year 2026. 114 00:05:35,087 --> 00:05:35,377 Like, 115 00:05:35,377 --> 00:05:35,617 just 116 00:05:35,727 --> 00:05:40,437 think that there's actually anyone in it who doesn't know what ransomware is? 117 00:05:40,782 --> 00:05:41,592 Well, yeah. 118 00:05:41,592 --> 00:05:42,492 You know why? 119 00:05:42,942 --> 00:05:48,522 The Google Keyword Planner, which I use to plan my episodes. 120 00:05:48,852 --> 00:05:54,522 What do you suppose the average monthly search for? 121 00:05:54,582 --> 00:05:55,362 What is ransomware? 122 00:05:55,362 --> 00:05:55,392 Uh 123 00:05:57,222 --> 00:05:58,002 Oh. 124 00:06:00,267 --> 00:06:01,077 I am gonna guess. 125 00:06:01,077 --> 00:06:02,727 It's like per month, 126 00:06:03,342 --> 00:06:03,842 10 million. 127 00:06:04,497 --> 00:06:05,682 Oh, no, it's not that bad. 128 00:06:07,092 --> 00:06:07,912 No, but, but, 129 00:06:07,972 --> 00:06:08,192 but 130 00:06:08,812 --> 00:06:09,032 but 131 00:06:09,327 --> 00:06:11,217 10 to a hundred thousand times a month. 132 00:06:11,337 --> 00:06:13,377 But here's the thing, here's my question. 133 00:06:13,382 --> 00:06:15,507 How, how much, like, outside of it, 134 00:06:15,777 --> 00:06:17,067 who cares about ransomware? 135 00:06:17,397 --> 00:06:23,007 So, um, I, I'm, I think this is mostly it and it related people and, 136 00:06:23,427 --> 00:06:26,757 uh, and so, you know, we're, we're spot, we're talking to those people. 137 00:06:26,877 --> 00:06:30,507 So if you already know what ransomware is and you know, I don't know, go listen 138 00:06:30,507 --> 00:06:31,707 to one of our other episodes. 139 00:06:32,487 --> 00:06:37,017 Yeah, you might you always, everyone learns a thing or two let's talk about, 140 00:06:37,017 --> 00:06:42,567 you know, what is ransomware and there, and there are sort of two flavors, if 141 00:06:42,567 --> 00:06:44,817 you will, of, of a ransomware attack. 142 00:06:44,907 --> 00:06:46,527 And I think that the second one is 143 00:06:46,527 --> 00:06:49,467 becoming much more common, right? 144 00:06:49,497 --> 00:06:50,097 interesting. 145 00:06:50,817 --> 00:06:53,907 So I'll talk the first one because I'm not sure what the second one is 146 00:06:53,907 --> 00:06:57,117 you're referring to, but traditionally, 147 00:06:57,357 --> 00:06:57,657 Yeah. 148 00:06:57,657 --> 00:06:59,517 A traditional talk about a traditional 149 00:06:59,877 --> 00:06:59,997 ransomware 150 00:07:00,282 --> 00:07:00,612 Yeah. 151 00:07:00,942 --> 00:07:06,462 A traditional ransomware attack is where someone gains access to your systems. 152 00:07:06,942 --> 00:07:08,832 They might encrypt your data, 153 00:07:09,162 --> 00:07:09,582 Mm-hmm. 154 00:07:09,582 --> 00:07:13,062 and then they ask for a ransom, right? 155 00:07:13,062 --> 00:07:14,022 Usually Bitcoin 156 00:07:14,322 --> 00:07:17,382 in order to provide you back the key to unlock your data, 157 00:07:17,802 --> 00:07:18,942 and then they got smarter. 158 00:07:20,682 --> 00:07:23,472 Because people were like, Hey, I don't need to pay the ransom. 159 00:07:23,472 --> 00:07:25,872 Let me just restore from backups. 160 00:07:26,082 --> 00:07:30,462 And so then they added an additional extortion mechanism where they would 161 00:07:30,462 --> 00:07:36,042 exfiltrate some of your sensitive data emails, et cetera, and then say, okay, if 162 00:07:36,042 --> 00:07:37,902 you don't pay us the ransom, that's fine. 163 00:07:37,902 --> 00:07:41,592 If you could restore your environment, but we're then gonna release all this data 164 00:07:41,592 --> 00:07:45,702 about your company that you may not want out in public, and therefore you really, 165 00:07:45,702 --> 00:07:46,917 really, really should pay a ransome. 166 00:07:48,207 --> 00:07:51,447 And you said you didn't know what the other kind of attack was. 167 00:07:52,467 --> 00:07:53,817 Were they both The second 168 00:07:54,792 --> 00:07:55,452 The first one 169 00:07:55,932 --> 00:07:57,522 you did, the first and the second. 170 00:07:57,522 --> 00:07:57,822 See, you 171 00:07:57,822 --> 00:07:58,422 don't need me. 172 00:07:58,422 --> 00:07:59,592 I don't even need to be here. 173 00:08:00,192 --> 00:08:01,182 Um, yeah. 174 00:08:01,182 --> 00:08:04,482 So that, so basically that second attack is what we, what we now 175 00:08:04,482 --> 00:08:06,162 call a double extortion attack. 176 00:08:06,222 --> 00:08:06,612 Right? 177 00:08:07,032 --> 00:08:09,042 Uh, the, the original was sort of the. 178 00:08:09,517 --> 00:08:11,017 The standard extortion. 179 00:08:11,017 --> 00:08:11,317 Right. 180 00:08:11,317 --> 00:08:14,677 Either give it, you know, but basically it's where the word ransom 181 00:08:14,737 --> 00:08:18,307 came from or ransomware, because it's, you're ransoming the data. 182 00:08:18,307 --> 00:08:21,757 You, I've taken your data essentially, and, and by taking 183 00:08:21,757 --> 00:08:25,747 it, basically we have, we have made your data inaccessible to you. 184 00:08:25,987 --> 00:08:27,427 It, we didn't have to take it. 185 00:08:27,772 --> 00:08:29,122 In the sense of the way 186 00:08:29,152 --> 00:08:32,992 a traditional like ransom would be, but we've essentially taken your 187 00:08:32,992 --> 00:08:36,802 data away from you by encrypting it and you can have it back. 188 00:08:37,132 --> 00:08:37,612 Right. 189 00:08:37,672 --> 00:08:39,412 Um, you know, for the, you 190 00:08:39,412 --> 00:08:40,907 know, for $1 million. 191 00:08:41,802 --> 00:08:45,132 but I, I think though, even that first case, even though the 192 00:08:45,132 --> 00:08:50,022 second one is more bulletproof from a threat actor perspective, 193 00:08:50,022 --> 00:08:50,622 because they're more 194 00:08:50,622 --> 00:08:54,702 likely to be paid, I think though the first one is still common in 195 00:08:55,182 --> 00:08:57,732 consumer personal ransomware attacks, 196 00:08:58,422 --> 00:09:01,572 Where someone opens an email, they encrypt your laptop, and they're 197 00:09:01,572 --> 00:09:03,312 like, Hey, pay me some Bitcoin. 198 00:09:04,072 --> 00:09:06,472 Because it's sort of a volume play, right? 199 00:09:06,472 --> 00:09:10,702 They're looking to hit as many systems as possible, hoping someone pays out. 200 00:09:10,702 --> 00:09:13,612 They don't really need to exfiltrate the data because what are they 201 00:09:13,612 --> 00:09:16,882 gonna find on your laptop, your home pictures, and stuff like that, 202 00:09:17,052 --> 00:09:19,842 Well, home pictures. 203 00:09:24,052 --> 00:09:24,442 yeah, 204 00:09:24,792 --> 00:09:25,092 like 205 00:09:26,387 --> 00:09:26,507 I. 206 00:09:27,132 --> 00:09:29,232 yes, there are some data. 207 00:09:29,262 --> 00:09:34,002 There is technically it is our, there are data, but I'd never say it that 208 00:09:34,002 --> 00:09:34,212 way. 209 00:09:34,812 --> 00:09:38,382 There there is data on many people's home devices that 210 00:09:38,382 --> 00:09:40,482 they would not want out there. 211 00:09:40,602 --> 00:09:41,112 Right. 212 00:09:41,592 --> 00:09:44,562 But then to filter that all out and to process it. 213 00:09:44,562 --> 00:09:45,012 Right. 214 00:09:45,072 --> 00:09:46,692 If you have a million devices 215 00:09:47,337 --> 00:09:51,567 Yeah, well again, well, you know, the spray and pray, right? 216 00:09:51,567 --> 00:09:55,347 So there basically, I'm gonna say there's a 217 00:09:55,737 --> 00:09:58,377 a significant percentage of people that have 218 00:09:58,947 --> 00:10:03,807 sensitive pictures and video on their personal devices that 219 00:10:03,807 --> 00:10:04,497 they would not want out to 220 00:10:05,397 --> 00:10:06,087 the world. 221 00:10:06,447 --> 00:10:10,767 I'm gonna tell those people, please stop putting that stuff on your devices. 222 00:10:10,917 --> 00:10:11,307 Right. 223 00:10:11,847 --> 00:10:17,427 Um, you know, it, it, it's in today's world that is, you know, 224 00:10:17,427 --> 00:10:19,047 I I, I'm not blaming the victim. 225 00:10:19,047 --> 00:10:26,067 I'm just stating a fact that if that data is accessible in iCloud or, uh, you 226 00:10:26,067 --> 00:10:28,017 know, or something like that, right? 227 00:10:28,107 --> 00:10:30,177 Um, Google Photos, et cetera. 228 00:10:30,627 --> 00:10:31,557 Uh. 229 00:10:31,977 --> 00:10:33,927 It is possible that it will 230 00:10:34,227 --> 00:10:37,347 get taken and, and, and, then leaked. 231 00:10:37,377 --> 00:10:42,627 And I mean, look at all of the famous people that, that, have, uh, had their 232 00:10:42,717 --> 00:10:44,937 basically nude photos leaked, 233 00:10:44,952 --> 00:10:49,722 And, I think this is a good segue or analogy into that small business 234 00:10:49,722 --> 00:10:51,282 case we were talking about earlier, 235 00:10:51,282 --> 00:10:51,582 right? 236 00:10:51,582 --> 00:10:55,182 Where an average home user might think, oh, I'm not a celebrity. 237 00:10:55,182 --> 00:10:56,922 I don't need to worry about this stuff. 238 00:10:57,177 --> 00:10:57,717 Yeah. 239 00:10:57,987 --> 00:10:58,467 Yeah. 240 00:10:58,497 --> 00:11:03,087 Well, uh, and, and again, think about, so it's not just, um, I 241 00:11:03,087 --> 00:11:07,077 love using the phrase 11 herbs and spices, right, which is from KFC. 242 00:11:07,107 --> 00:11:07,677 For those of you 243 00:11:07,677 --> 00:11:08,037 that don't 244 00:11:08,037 --> 00:11:09,837 know, that's a u it's a US thing. 245 00:11:09,837 --> 00:11:13,767 But, uh, they used to always talk about their, that that was their secret. 246 00:11:13,797 --> 00:11:17,577 You know, their, their, their, uh, what would their secret sauce, right? 247 00:11:17,577 --> 00:11:18,327 The, you know. 248 00:11:19,077 --> 00:11:21,747 It's not just like your, your secret sauce. 249 00:11:21,777 --> 00:11:24,957 You might not, you're thinking, well, I don't have, uh, 11 herbs and spices. 250 00:11:24,957 --> 00:11:27,867 I don't have some massive corporate secret that if it got 251 00:11:27,867 --> 00:11:29,337 out, my company would be over. 252 00:11:29,577 --> 00:11:32,247 I'm just, uh, an oil change 253 00:11:32,247 --> 00:11:32,817 guy. 254 00:11:32,877 --> 00:11:33,387 Right. 255 00:11:33,447 --> 00:11:36,222 Um, so the question is, you know, is there anything. 256 00:11:37,362 --> 00:11:39,012 On there that you would not want out? 257 00:11:39,012 --> 00:11:41,892 Not not, you know, like I said, ip. 258 00:11:41,982 --> 00:11:46,512 But have you ever searched on anything that maybe you shouldn't 259 00:11:46,512 --> 00:11:48,312 have searched on a company computer? 260 00:11:48,402 --> 00:11:48,762 Right? 261 00:11:49,212 --> 00:11:53,082 Think about those kinds of things, conversations, emails that you had. 262 00:11:53,337 --> 00:11:56,337 Where you talked about, let's just continue with the oil change guy, 263 00:11:56,577 --> 00:11:59,997 where you talked about how stupid all these people are that come 264 00:11:59,997 --> 00:12:01,737 in and they're always coming in. 265 00:12:01,737 --> 00:12:04,047 They're supposed to do their oil at 5,000 miles and they're 266 00:12:04,047 --> 00:12:05,997 coming in at 57,000 miles. 267 00:12:05,997 --> 00:12:06,657 That was stupid. 268 00:12:06,657 --> 00:12:07,737 In fact, there was a guy named 269 00:12:07,737 --> 00:12:09,957 Steve, you know, and you just, you know, 270 00:12:09,957 --> 00:12:13,557 or, or you're joking about never actually changing someone's oil or 271 00:12:13,617 --> 00:12:14,067 Yeah. 272 00:12:14,097 --> 00:12:14,607 Yeah. 273 00:12:14,667 --> 00:12:15,357 Oh yeah. 274 00:12:15,417 --> 00:12:15,837 Right. 275 00:12:15,867 --> 00:12:16,167 Ooh. 276 00:12:16,227 --> 00:12:17,427 Oh, that would be really worse. 277 00:12:17,427 --> 00:12:17,757 Right? 278 00:12:17,817 --> 00:12:22,407 Um, you know, I can think, um, there's a, there, uh, there's a 279 00:12:22,407 --> 00:12:25,197 local, um, oil change company. 280 00:12:26,487 --> 00:12:29,427 It's a bit of a non-sequitur, but there was an oil change company here 281 00:12:29,637 --> 00:12:37,807 that, um, I caught them talking my wife into a injector cleaning service. 282 00:12:38,197 --> 00:12:39,427 Every oil change. 283 00:12:39,727 --> 00:12:43,237 They were charging her, and by the time I was like, why, why are 284 00:12:43,237 --> 00:12:44,587 your oil changes so expensive? 285 00:12:44,587 --> 00:12:46,717 She goes, well, they said I needed the thing. 286 00:12:46,717 --> 00:12:47,257 And I'm like, oh. 287 00:12:47,317 --> 00:12:49,057 My God, I was so angry. 288 00:12:49,057 --> 00:12:51,307 I was, I, I, let's just say I read, I'm gonna write it. 289 00:12:51,307 --> 00:12:55,387 So think about, you know, anything your company might have done ever 290 00:12:55,687 --> 00:12:58,927 that would not look good in the local news. 291 00:12:59,227 --> 00:13:01,122 That's the kind of thing that would go out. 292 00:13:01,792 --> 00:13:05,212 You know, um, you know, emails between, and also emails that 293 00:13:05,212 --> 00:13:07,612 you might not know about, right? 294 00:13:07,612 --> 00:13:09,202 There may be people at your company. 295 00:13:09,202 --> 00:13:12,052 I know that this is, you know, it's gonna surprise you, but not everybody at your 296 00:13:12,052 --> 00:13:14,332 company is a, is a, what do you call it? 297 00:13:14,332 --> 00:13:15,322 A, a saint, 298 00:13:15,922 --> 00:13:16,282 right? 299 00:13:16,672 --> 00:13:17,722 Think about that, right? 300 00:13:17,722 --> 00:13:23,512 That is what a modern ransomware attack is, and I will say that. 301 00:13:25,057 --> 00:13:30,697 Most of what we cover in the book is how to defend against a traditional 302 00:13:30,697 --> 00:13:34,507 ransomware attack, because by the way, a new ransomware attack of 303 00:13:34,507 --> 00:13:39,187 double extortion is still the old school of ransomware attack, right? 304 00:13:39,247 --> 00:13:39,547 Um, 305 00:13:39,562 --> 00:13:40,012 With a new 306 00:13:40,027 --> 00:13:41,517 st with a new spin, 307 00:13:41,767 --> 00:13:45,607 you still need to be able to restore your data and get to get your data back, 308 00:13:46,297 --> 00:13:51,367 and then you will need to make a dec a business decision as to whether or not. 309 00:13:52,102 --> 00:13:57,022 This secret, whatever it is, whether it's, you know, you know, your company 310 00:13:57,022 --> 00:13:58,942 IP or uh, 311 00:13:59,542 --> 00:14:01,372 embarrassing information, whether or not 312 00:14:01,372 --> 00:14:02,657 you wanna allow that to go out. 313 00:14:02,962 --> 00:14:03,262 yeah. 314 00:14:03,262 --> 00:14:06,892 And if I think, go back and think about like the double extortion one, right? 315 00:14:06,892 --> 00:14:10,432 One of the most famous ones that sticks in my mind is a Sony hack, 316 00:14:10,477 --> 00:14:10,767 Yeah. 317 00:14:10,917 --> 00:14:11,207 Yeah. 318 00:14:11,752 --> 00:14:12,082 right? 319 00:14:12,142 --> 00:14:16,432 Where someone got in, they were in the system, they exfiltrated a bunch of 320 00:14:16,432 --> 00:14:21,622 emails where studio execs were mocking some of the actors and actresses, 321 00:14:22,372 --> 00:14:23,542 and that did not go over well. 322 00:14:24,262 --> 00:14:25,072 No, it did not. 323 00:14:25,342 --> 00:14:27,682 Uh, I mean, they eventually recovered and, and I, and that's 324 00:14:27,682 --> 00:14:29,422 what I want people to think about. 325 00:14:29,932 --> 00:14:36,682 It's gonna be one of those things where you, you have to have a long-term, uh, you 326 00:14:36,682 --> 00:14:39,572 know, view and you have to say, you know. 327 00:14:40,237 --> 00:14:44,917 Long term, it's not good for us, uh, to pay the ransom because all you're doing 328 00:14:44,917 --> 00:14:49,117 when you pay the ransom is to, uh, to tell the people that you pay ransom, 329 00:14:49,477 --> 00:14:49,867 right? 330 00:14:49,867 --> 00:14:56,667 And you are absolutely, just like in the real ransom world, you are setting 331 00:14:56,667 --> 00:14:58,617 yourself up to be kidnapped again. 332 00:14:59,232 --> 00:14:59,502 Yep. 333 00:14:59,652 --> 00:15:03,642 In fact, that's where a lot of these ransomware as a service people do, right? 334 00:15:03,642 --> 00:15:08,562 They still have that persistent connectivity into your environment, 335 00:15:09,192 --> 00:15:12,522 and they sell it to the next person who then uses that to then hack 336 00:15:12,522 --> 00:15:15,712 you, and you now, like you said, you have to pay the ransom again. 337 00:15:16,842 --> 00:15:17,832 Yeah, exactly. 338 00:15:18,012 --> 00:15:18,642 Um, 339 00:15:19,062 --> 00:15:22,122 Well, you know, for a second there, I thought you were going to say 340 00:15:22,122 --> 00:15:26,622 that it's okay to continue writing emails like that and other things and 341 00:15:26,622 --> 00:15:28,392 never learning from your mistakes. 342 00:15:29,772 --> 00:15:31,482 You should learn from your mistakes. 343 00:15:31,632 --> 00:15:36,162 I bet you Sony learned not to talk about their talent in the emails. 344 00:15:36,552 --> 00:15:41,022 Uh, I'm sure they still talk about their talent, you know, talk about their talent. 345 00:15:41,202 --> 00:15:42,372 They just don't do it in email. 346 00:15:42,522 --> 00:15:45,912 Although I have to say, people continue. 347 00:15:46,872 --> 00:15:53,502 To amaze me in terms of what they continue to talk about in email in today's world. 348 00:15:54,492 --> 00:15:57,222 You know, given or or text. 349 00:15:57,222 --> 00:15:58,002 Yeah, text. 350 00:15:58,002 --> 00:15:58,392 Right. 351 00:15:58,572 --> 00:16:04,122 Um, and, uh, like, yeah, because, you know, well anyway, but the 352 00:16:04,242 --> 00:16:08,592 thing is, the thing about all that stuff, all that stuff could come out in a, um. 353 00:16:09,857 --> 00:16:10,722 In, in an attack. 354 00:16:10,722 --> 00:16:16,032 And so there are things and we're gonna talk about in, in, in upcoming episodes. 355 00:16:16,392 --> 00:16:18,822 We are, we are at our heart. 356 00:16:18,822 --> 00:16:23,682 We're still a backup and recovery, uh, focused, uh, podcast. 357 00:16:24,192 --> 00:16:31,632 But you, in a modern world, you need to be, uh, aware and to understand 358 00:16:31,632 --> 00:16:34,062 the threats that your backups have. 359 00:16:34,122 --> 00:16:38,552 And I don't know anyone that would argue with the following statement. 360 00:16:38,582 --> 00:16:45,392 Ransomware is the number one threat to your backups, um, and the number 361 00:16:45,392 --> 00:16:49,142 one reason that you need your backups. 362 00:16:50,057 --> 00:16:53,177 I was gonna say, Billy is the number one threat to your backups. 363 00:16:53,462 --> 00:16:53,882 What? 364 00:16:54,287 --> 00:16:57,982 The random person who might go and just like blow up your environment, but 365 00:17:00,782 --> 00:17:02,552 Billy, Billy Billy's, uh, 366 00:17:02,662 --> 00:17:03,012 sorry, 367 00:17:03,012 --> 00:17:03,292 Billy. 368 00:17:03,452 --> 00:17:03,932 not to. 369 00:17:04,622 --> 00:17:05,012 Yeah. 370 00:17:05,192 --> 00:17:07,352 You know, technically that could be my first name. 371 00:17:07,592 --> 00:17:08,372 You know that right? 372 00:17:09,332 --> 00:17:10,202 The W. The 373 00:17:10,487 --> 00:17:11,147 but it's not 374 00:17:11,642 --> 00:17:12,092 but it's 375 00:17:12,137 --> 00:17:15,827 but it's, it's interesting point you made because if you look at, I'm, I'm just 376 00:17:15,827 --> 00:17:17,867 looking at the poster behind you, right? 377 00:17:17,867 --> 00:17:20,087 Your, your book, right? 378 00:17:20,087 --> 00:17:23,657 And it's really like ransomware response, right? 379 00:17:23,657 --> 00:17:25,127 Which I think everyone thinks about, but I 380 00:17:25,127 --> 00:17:27,227 think that key thing is the last piece, right? 381 00:17:27,227 --> 00:17:27,767 The recovery 382 00:17:28,097 --> 00:17:28,427 Yeah. 383 00:17:28,667 --> 00:17:29,027 Yeah. 384 00:17:29,117 --> 00:17:29,477 right? 385 00:17:29,657 --> 00:17:31,367 Backup is crucial 386 00:17:31,547 --> 00:17:32,897 in recovering from ransomware. 387 00:17:33,527 --> 00:17:34,457 yeah, exactly. 388 00:17:34,667 --> 00:17:39,737 So, so the, you know, and, and this is the, this is the tack that 389 00:17:39,737 --> 00:17:42,287 this podcast and that book takes. 390 00:17:42,797 --> 00:17:48,257 There are a million books you can go by on how to not get ransomware. 391 00:17:49,247 --> 00:17:53,177 Our book basically starts from what they call an assumed breach. 392 00:17:53,822 --> 00:17:58,532 Um, you know, a position, which means you're probably gonna get ransomware. 393 00:17:59,042 --> 00:18:04,712 The odds of you as a company not getting any ransomware ever are virtually nil. 394 00:18:04,892 --> 00:18:09,242 So you need to be able to respond to that and to recover. 395 00:18:09,302 --> 00:18:16,112 And, and the, the, the position of the book is that you need 396 00:18:16,112 --> 00:18:17,222 to have these discussions. 397 00:18:17,222 --> 00:18:17,732 Now. 398 00:18:17,762 --> 00:18:19,082 You need to make the decisions. 399 00:18:19,082 --> 00:18:21,362 Now what are we going to do? 400 00:18:21,767 --> 00:18:25,097 When we get a double extortion attack, right? 401 00:18:25,127 --> 00:18:27,947 Think about the worst thing that your company has that 402 00:18:27,947 --> 00:18:29,117 you don't want getting out. 403 00:18:29,147 --> 00:18:36,257 What are we gonna do when some Russian, um, you know, company comes 404 00:18:36,257 --> 00:18:39,617 to us and says, you know, you know, we have this stuff and what they 405 00:18:39,617 --> 00:18:44,057 do, by the way, what they do is they post it on like a proof site, right? 406 00:18:44,087 --> 00:18:46,967 Um, you know, they, they call it a Proof of life site. 407 00:18:47,222 --> 00:18:47,612 Right. 408 00:18:47,972 --> 00:18:50,252 Uh, just like, again, going back with the ransom 409 00:18:50,492 --> 00:18:53,402 concept right here, here, here's the proof that we have your 410 00:18:53,402 --> 00:18:55,142 data and that we can publish it 411 00:18:55,142 --> 00:18:56,252 anytime we want to. 412 00:18:57,002 --> 00:19:02,132 Um, you know what, you need to make all these decisions upfront. 413 00:19:02,642 --> 00:19:04,172 Uh, you know, 414 00:19:04,652 --> 00:19:05,912 if you're gonna be successful, 415 00:19:06,002 --> 00:19:09,092 so I, as you were talking through this, sorry, I might have 416 00:19:09,092 --> 00:19:10,352 looked a little distracted and I 417 00:19:10,622 --> 00:19:12,092 you looked a little distracted. 418 00:19:13,412 --> 00:19:17,102 because when you were talking through that, so we live in California, right? 419 00:19:17,132 --> 00:19:17,252 You 420 00:19:17,252 --> 00:19:18,632 know, the first thing that popped to mind, 421 00:19:19,242 --> 00:19:19,532 What? 422 00:19:19,952 --> 00:19:21,302 earthquake preparedness. 423 00:19:21,392 --> 00:19:21,632 Right? 424 00:19:22,592 --> 00:19:25,352 Really when you're talking about ransomware recovery, like everything you 425 00:19:25,352 --> 00:19:27,302 talked about, have a plan ahead of time. 426 00:19:27,302 --> 00:19:29,132 Figure out what you're going to do, all the rest 427 00:19:29,612 --> 00:19:30,632 as kids, right? 428 00:19:30,632 --> 00:19:32,792 You did the exact same thing, right? 429 00:19:32,792 --> 00:19:35,432 You figured out, okay, if something happened, I'm going here. 430 00:19:35,672 --> 00:19:39,842 Here's my little bag for school that contains like non-perishable 431 00:19:39,842 --> 00:19:43,382 food in case I get stuck at school with water right here. 432 00:19:43,382 --> 00:19:46,202 The emergency contact numbers, everything else, because being 433 00:19:46,202 --> 00:19:47,612 prepared is half the battle. 434 00:19:48,167 --> 00:19:48,557 Yeah. 435 00:19:48,947 --> 00:19:49,277 Yeah. 436 00:19:49,367 --> 00:19:49,907 Agreed. 437 00:19:50,207 --> 00:19:52,757 By the way, um, just a funny little thing. 438 00:19:53,117 --> 00:19:58,907 One of my, uh, uh, technical, uh, editors, right? 439 00:19:59,147 --> 00:20:02,777 Um, uh, Gina, she, um. 440 00:20:03,527 --> 00:20:08,027 She said, you know, the term assume breach means a lot different for women. 441 00:20:08,597 --> 00:20:13,517 And I was like, she, I was like, I was like, uh, yeah. 442 00:20:13,547 --> 00:20:13,877 Okay. 443 00:20:13,877 --> 00:20:14,987 I didn't make up the term. 444 00:20:14,987 --> 00:20:15,437 All right. 445 00:20:15,437 --> 00:20:17,477 It's just a, it's, it's just an industry term. 446 00:20:17,477 --> 00:20:18,227 Assume, breach. 447 00:20:18,257 --> 00:20:19,067 I dunno what to tell you. 448 00:20:19,787 --> 00:20:21,857 Um, anyway. 449 00:20:21,857 --> 00:20:22,007 Yeah. 450 00:20:22,007 --> 00:20:27,107 So, so you, you, I, I think the, the point that we're making right 451 00:20:27,107 --> 00:20:31,607 now, and the point that the book makes is that you need to adopt. 452 00:20:32,822 --> 00:20:37,892 The, the tack that you're probably going to get it, or at least that the 453 00:20:37,892 --> 00:20:40,622 chances of you getting are significantly high. 454 00:20:41,102 --> 00:20:42,422 It's not the same. 455 00:20:42,812 --> 00:20:47,432 When we go back to again, to, to use your, your, your earthquake, uh, thing. 456 00:20:47,822 --> 00:20:50,912 If you live in, there are certain parts of the country where natural 457 00:20:50,912 --> 00:20:54,302 disasters almost don't get to you, right? 458 00:20:54,362 --> 00:20:58,142 The only thing generally you're worried about is like fires, right? 459 00:20:58,142 --> 00:20:59,687 You're not gonna get floods, you're not gonna get. 460 00:21:00,242 --> 00:21:03,152 Hurricanes, you're not gonna get, um, you. 461 00:21:03,152 --> 00:21:04,592 know, actually it's sort of you. 462 00:21:04,592 --> 00:21:08,672 If you think, if you think about the country, our country, I don't know about 463 00:21:08,672 --> 00:21:12,482 other countries, but if you think about the country, you pick your poison, right? 464 00:21:12,632 --> 00:21:13,022 Do you want 465 00:21:13,022 --> 00:21:14,702 hurricanes and tsunamis? 466 00:21:15,002 --> 00:21:16,592 Do you want tornadoes? 467 00:21:16,862 --> 00:21:18,242 Do you want earthquakes? 468 00:21:18,482 --> 00:21:18,872 Do you want 469 00:21:18,872 --> 00:21:20,522 massive forest fires? 470 00:21:20,852 --> 00:21:24,332 My, my point was that depending on, there are parts where you 471 00:21:24,332 --> 00:21:27,632 can pick, where natural disasters don't really go after you. 472 00:21:28,082 --> 00:21:33,242 Um, I'm thinking like south, like not east, you know, like 473 00:21:33,902 --> 00:21:34,382 somewhere 474 00:21:34,577 --> 00:21:35,147 the DRE show 475 00:21:35,252 --> 00:21:36,092 below the south. 476 00:21:36,362 --> 00:21:37,112 I remember the direction. 477 00:21:38,522 --> 00:21:39,992 Maybe there's nowhere you could go, 478 00:21:40,202 --> 00:21:41,732 but the, but your odds are lower. 479 00:21:41,882 --> 00:21:42,477 My point is. 480 00:21:43,172 --> 00:21:47,072 There's nowhere you can go to lower the odds of a ransomware attack. 481 00:21:47,342 --> 00:21:47,762 Right? 482 00:21:48,152 --> 00:21:51,542 Um, and, and that's if, if you learn nothing from this episode, 483 00:21:51,542 --> 00:21:56,042 it's that the odds and, and we go into the stats in the book, uh, the 484 00:21:56,042 --> 00:22:00,842 odds of you getting a ransomware attack are, it's something like 80%. 485 00:22:01,412 --> 00:22:06,152 Uh, you know, in terms of, especially when you look at over time, 486 00:22:06,482 --> 00:22:06,902 right? 487 00:22:07,352 --> 00:22:10,592 Over time, the odds of you getting a ransomware attack are 488 00:22:10,592 --> 00:22:11,492 essentially a hundred percent. 489 00:22:12,017 --> 00:22:12,377 Right. 490 00:22:12,947 --> 00:22:17,867 Uh, and so the question is, there are a bunch of things that you can do in 491 00:22:17,867 --> 00:22:22,187 advance a, to minimize, at least reduce the number of attacks that you get. 492 00:22:22,187 --> 00:22:25,457 There are like the, the book does start out with, and we're, we're 493 00:22:25,457 --> 00:22:26,687 gonna cover that in the podcast. 494 00:22:26,687 --> 00:22:29,447 The book does start out with, here are some things that if you're not doing 495 00:22:29,447 --> 00:22:32,267 them well, you're just, you know, you're, that, that person that never 496 00:22:32,267 --> 00:22:36,077 changes their oil, you've gotta do some things and, and it will stop roughly 497 00:22:36,077 --> 00:22:38,807 90% of the attacks when you look at. 498 00:22:39,857 --> 00:22:43,757 So many of the stories that we've read, and they're like, oh, and they, you 499 00:22:43,757 --> 00:22:46,787 know, they had a bad password and they didn't have MA and they, you know, 500 00:22:46,787 --> 00:22:48,797 you're like, you know, it just kills me. 501 00:22:49,012 --> 00:22:50,477 Or unpatched system 502 00:22:50,477 --> 00:22:50,897 Yeah. 503 00:22:50,897 --> 00:22:51,887 Unpatched systems. 504 00:22:51,887 --> 00:22:52,127 Yeah. 505 00:22:52,127 --> 00:22:53,027 All that stuff, right? 506 00:22:53,207 --> 00:22:56,957 So there are some things you can do to significantly reduce the 507 00:22:56,957 --> 00:23:01,937 frequency of a successful attack, but there are also some things that 508 00:23:01,937 --> 00:23:05,897 you need to do in advance to prepare. 509 00:23:06,482 --> 00:23:07,982 To be able to respond. 510 00:23:07,982 --> 00:23:08,342 Right. 511 00:23:08,372 --> 00:23:12,422 One of them is, uh, obviously backup and recovery, 512 00:23:12,452 --> 00:23:12,812 right? 513 00:23:12,842 --> 00:23:18,422 Having a solid backup and recovery system, um, that uses immutable storage, right? 514 00:23:18,422 --> 00:23:20,342 We, we've, we, we talk about that a lot. 515 00:23:20,342 --> 00:23:22,022 We talked about it in the last few episodes. 516 00:23:22,592 --> 00:23:26,732 Um, you know, and then another I really believe strongly, and this is, you know, 517 00:23:26,732 --> 00:23:28,502 this will sound like I'm, I'm shilling for 518 00:23:28,502 --> 00:23:32,342 Mike, but I believe strongly in having a, a, uh, cybersecurity, 519 00:23:32,732 --> 00:23:33,722 uh, service provider, 520 00:23:33,782 --> 00:23:34,142 right? 521 00:23:34,382 --> 00:23:37,112 Having somebody that this is what they do, right? 522 00:23:37,352 --> 00:23:41,132 Look at, you know, even if they're just like doing a regular checkup 523 00:23:41,132 --> 00:23:45,632 on what it is that you are doing, uh, but, but they can also provide. 524 00:23:45,632 --> 00:23:51,677 SEIM/SOAR tools and XDR tools where they have like a volume discount, right? 525 00:23:51,797 --> 00:23:56,357 And then they could potentially put in that, you know, and then you get, and, and 526 00:23:56,357 --> 00:24:00,857 they can more importantly, because what matters more than the product you pick is 527 00:24:00,857 --> 00:24:02,267 how it gets configured and they'll know 528 00:24:02,267 --> 00:24:02,957 how to do that. 529 00:24:03,077 --> 00:24:03,377 Right. 530 00:24:04,367 --> 00:24:06,977 Um, anyway, we're getting ahead of ourselves. 531 00:24:07,097 --> 00:24:07,727 Um. 532 00:24:07,952 --> 00:24:08,282 Yeah. 533 00:24:08,282 --> 00:24:09,362 Save those for later. 534 00:24:09,422 --> 00:24:09,782 Come on, 535 00:24:09,977 --> 00:24:10,517 yeah. 536 00:24:10,637 --> 00:24:13,817 Um, but, but buy my book anyway. 537 00:24:13,877 --> 00:24:18,137 Um, we, it's available for pre-order now. 538 00:24:18,387 --> 00:24:22,167 I'm actually literally, right now I'm doing what's called the QC two, which 539 00:24:22,167 --> 00:24:25,587 is the quality control number two. 540 00:24:25,617 --> 00:24:26,637 This is the final, 541 00:24:27,862 --> 00:24:31,232 When it's, so, do you have a date for our 542 00:24:31,407 --> 00:24:34,707 Uh, it's gonna be, uh, yeah, 543 00:24:34,707 --> 00:24:36,927 I think the official date is March and we're on, we're 544 00:24:36,927 --> 00:24:41,097 on target for, uh, that, um, you know, we 545 00:24:41,097 --> 00:24:41,277 have 546 00:24:41,277 --> 00:24:41,487 so 547 00:24:41,487 --> 00:24:42,477 a couple of things. 548 00:24:43,287 --> 00:24:44,817 March, 20, 26. 549 00:24:44,817 --> 00:24:44,997 Yeah. 550 00:24:44,997 --> 00:24:47,217 So if you're listening to this after, then it's already out. 551 00:24:47,247 --> 00:24:48,297 You should just go buy it. 552 00:24:48,757 --> 00:24:52,627 And there's a companion site for the book that will be live 553 00:24:52,627 --> 00:24:53,947 by the time the book is ready. 554 00:24:55,267 --> 00:24:56,707 It's currently not live. 555 00:24:57,277 --> 00:24:57,997 Um. 556 00:24:58,357 --> 00:25:03,007 It's funny, I was, I was, I was using, uh, my French friend as I 557 00:25:03,007 --> 00:25:06,847 like to call him Claude, to, to, to review the text in the book. 558 00:25:06,847 --> 00:25:07,237 Right. 559 00:25:07,237 --> 00:25:09,637 And, and I was like, Hey, look for any typos, look for any, 560 00:25:10,057 --> 00:25:12,097 you know, bad URLs or anything. 561 00:25:12,457 --> 00:25:15,697 And, and Claude was like, Hey, uh, that website that you're pointing 562 00:25:15,697 --> 00:25:17,437 people to, uh, it doesn't exist yet. 563 00:25:17,437 --> 00:25:18,337 I'm like, yeah, I know. 564 00:25:18,367 --> 00:25:24,367 Trust me, I know I will get that website up before the site goes live. 565 00:25:24,367 --> 00:25:25,117 So I've got like. 566 00:25:25,432 --> 00:25:26,902 One month to get it up in there. 567 00:25:27,232 --> 00:25:28,252 Uh, you'll be fine. 568 00:25:28,882 --> 00:25:29,872 Yeah, so I'm 569 00:25:29,872 --> 00:25:33,142 just gonna double check, see if there's anything else I want to cover on this. 570 00:25:33,532 --> 00:25:35,602 So for people who want to pick up the book in 571 00:25:35,782 --> 00:25:36,742 Yeah, yeah. 572 00:25:36,982 --> 00:25:38,122 how do they get it? 573 00:25:39,182 --> 00:25:43,982 So right now the, the, the one thing I can tell you is it's on amazon.com, 574 00:25:44,012 --> 00:25:44,252 right? 575 00:25:44,252 --> 00:25:46,712 It's on amazon.com and it's on O'Reilly dot com. 576 00:25:47,552 --> 00:25:49,952 It, you know, it's wherever you buy books, right? 577 00:25:50,032 --> 00:25:54,232 We'll, we'll have a link for it on the, the show website backup wrap up.com. 578 00:25:54,262 --> 00:25:55,342 We'll have a link for it there. 579 00:25:55,882 --> 00:26:00,232 And, um, and actually if you buy it there, I'll probably get an extra few bucks. 580 00:26:00,262 --> 00:26:02,242 So, you know, feel free to do that. 581 00:26:03,352 --> 00:26:03,892 All right. 582 00:26:03,952 --> 00:26:07,132 Um, anything else that we need to talk about with the, 583 00:26:08,017 --> 00:26:08,257 Nope. 584 00:26:08,482 --> 00:26:13,102 yeah, so basically I'm gonna say ransomware is the number one threat 585 00:26:13,102 --> 00:26:16,972 to the, to the stability of your data center and the business, 586 00:26:16,972 --> 00:26:18,352 and it's a business problem. 587 00:26:18,937 --> 00:26:21,547 Not just a technological problem, right? 588 00:26:21,937 --> 00:26:25,777 It is a thing that could shut down your company, right? 589 00:26:25,777 --> 00:26:27,607 It will shut down your company, right? 590 00:26:27,607 --> 00:26:27,727 You 591 00:26:27,787 --> 00:26:28,777 And it has in the 592 00:26:28,927 --> 00:26:32,797 yeah, you look at um, you look at companies that have ceased to 593 00:26:32,797 --> 00:26:34,477 exist after ransomware attacks. 594 00:26:34,717 --> 00:26:34,867 You 595 00:26:34,867 --> 00:26:37,447 look at companies that are significantly hamper. 596 00:26:38,827 --> 00:26:41,107 I think the worst one that I can think of is actually not 597 00:26:41,107 --> 00:26:42,577 a company, it's Costa Rica. 598 00:26:43,117 --> 00:26:48,817 There's a, Costa Rica got attacked, the entire government got attacked and they 599 00:26:48,817 --> 00:26:55,117 had a, or have a law that it's illegal for them to use taxpayer dollars to pay 600 00:26:55,117 --> 00:26:55,747 ransom. 601 00:26:55,777 --> 00:26:58,897 And so they didn't pay the ransom and basically, um, they 602 00:26:58,897 --> 00:27:00,217 never got their stuff back. 603 00:27:00,757 --> 00:27:03,667 And so they had to like rebuild essentially, whatever the. 604 00:27:03,952 --> 00:27:07,312 I dunno if the right, if you say federal government, but essentially the, their 605 00:27:07,312 --> 00:27:11,152 version of the federal government, like imagine rebuilding the IRS from scratch. 606 00:27:12,052 --> 00:27:12,442 Right. 607 00:27:12,442 --> 00:27:13,792 That's, that's what they had to do. 608 00:27:13,972 --> 00:27:14,332 Right. 609 00:27:14,542 --> 00:27:15,682 Um, so 610 00:27:16,237 --> 00:27:19,477 So, uh, so, uh, adding to that, 611 00:27:19,852 --> 00:27:20,242 Yeah, 612 00:27:20,617 --> 00:27:24,577 um, I was thinking about, well, as you were saying, like what 613 00:27:24,577 --> 00:27:29,077 is the most riskiest, uh, or costliest ransomware attack, 614 00:27:29,617 --> 00:27:30,817 Jaguar Land Rover. 615 00:27:31,162 --> 00:27:31,492 yeah. 616 00:27:31,492 --> 00:27:32,332 Are they still 617 00:27:32,707 --> 00:27:35,947 I think there's still recovering, I think it's like two and a half 618 00:27:35,947 --> 00:27:37,837 billion dollars in counting. 619 00:27:39,172 --> 00:27:40,312 So like three cars. 620 00:27:45,802 --> 00:27:49,582 Um, they're not the least expensive cars on the planet, I'll just say that. 621 00:27:51,022 --> 00:27:51,112 Yeah, 622 00:27:51,112 --> 00:27:53,602 two and a half billion, including all their suppliers and everything 623 00:27:53,602 --> 00:27:54,772 else that's been shut down. 624 00:27:55,162 --> 00:27:55,522 wow. 625 00:27:55,957 --> 00:27:57,487 That is just massive. 626 00:27:57,817 --> 00:28:01,267 Um, and, and, and you know, for most people listening to this, they're 627 00:28:01,267 --> 00:28:03,277 like, oh, well that, you know, they're just such a big company. 628 00:28:03,277 --> 00:28:10,687 You know, just, just think about what you would do if literally any of your mission 629 00:28:10,687 --> 00:28:13,297 critical servers just stop working, 630 00:28:13,927 --> 00:28:14,287 right? 631 00:28:14,287 --> 00:28:14,707 You can't 632 00:28:14,707 --> 00:28:17,977 access orders, you can't access customers, you can't email your 633 00:28:17,977 --> 00:28:18,787 customers. 634 00:28:19,177 --> 00:28:21,547 You wanna let your customers know what's going on, but you don't 635 00:28:21,547 --> 00:28:22,507 even know who your customers 636 00:28:22,507 --> 00:28:24,037 are because your computers are locked. 637 00:28:24,712 --> 00:28:28,192 It's I, it goes back to, I don't remember if you remember this, 638 00:28:28,192 --> 00:28:32,092 but remember the dentist, MSP, 639 00:28:32,542 --> 00:28:36,112 dentist, office, MSP, that got hit with ransomware and 640 00:28:36,112 --> 00:28:37,792 all the dentist's office got 641 00:28:38,782 --> 00:28:39,802 I do remember that. 642 00:28:39,862 --> 00:28:42,202 I was a, as I recall, it was a Dallas company. 643 00:28:42,802 --> 00:28:44,452 Um, yeah. 644 00:28:45,772 --> 00:28:46,402 Um. 645 00:28:46,492 --> 00:28:49,822 are you gonna do if you're a dentist and you're like, I can't email my patients. 646 00:28:50,182 --> 00:28:52,732 The patient shows up and they're like, I would need a teeth cleaned. 647 00:28:52,732 --> 00:28:54,442 You're like, I don't know who you are. 648 00:28:54,442 --> 00:28:55,672 I don't have your records. 649 00:28:56,122 --> 00:28:57,592 I can't entry you into my system. 650 00:28:57,592 --> 00:28:58,372 All the rest of that. 651 00:28:58,957 --> 00:28:59,287 Yeah. 652 00:29:01,057 --> 00:29:03,667 Um, it, it's not a good day, so 653 00:29:03,667 --> 00:29:06,967 just if you, if you're not doing much for ransomware, it's 654 00:29:06,967 --> 00:29:08,437 time to at least look into it. 655 00:29:08,617 --> 00:29:13,987 Um, feel free to check out my book and also, um, you know, following 656 00:29:14,047 --> 00:29:15,907 episodes, follow us and, um. 657 00:29:16,807 --> 00:29:23,257 You know, tell a friend, tell Prasanna, uh, that is a wrap.