Hello and welcome to another
application of the minor tech
framework discussion today
we're going to be looking at our
case study on come election.
Now, the
phrase for this particular
discussion today is what is
the pot of gold or what's the pot of
gold?
So items of interest,
typically the threat actors, targets
to hold for ransom, targets to sell
access to.
So your internal infrastructure,
your Office 365 tenent
data to sell can include credit card
information, medical data, any
type of personal information,
really.
So all of these areas are
of interest to a threat
actor. Now, some
of these breaches from twenty
nineteen or
maybe not on the scale for you as
a small business or mid-sized
business, but you have to keep
in mind that some of these
organizations likely have the
capability
to provide the type of controls that
should protect sensitive
information overall.
But things happen to any business,
big or small.
And so looking at these numbers, you
have to imagine what the payday
was for these
threat actors.
And so capital one hundred
and sixty million records eevi 100
million records, Jordache four point
nine potential records,
one hundred eight million on
elastics server, third party
Facebook at five hundred and forty
million items for sale on
Greenmarket. And this is a number of
multiple domains.
Six hundred and twenty million.
We're talking billions
of records, billions
even if those were
at 50 cents a record,
you're talking five hundred million
dollars.
But they're not. They're way more
than that. And so the potential
payout here is huge.
This is why we
are struggling day in and day out
with threat actors.
And we're struggling with this
kind of black market
where data is being sold constantly
and our information is being exposed
constantly. So
even if you're a smaller
organization, if
you've got one hundred records that
are stolen and they're worth 50
bucks a pop, 20 bucks a pop, that's
still time well spent
for a threat. Actor if you don't
have records that are of benefit,
your systems are still
valuable to a threat actor because
they could be used to serve up
illegal content.
They can be used to attack other
organizations.
There would be nothing more
embarrassing for a local business
to have the FBI show up
and seize your equipment because
it's being used to attack government
entities.
It's being used to serve up content.
It's being used to
do any number of things.
And so you don't want to have to
defend yourself in a court of law.
You don't want to have to worry
about these things.
And so you need to start asking
yourself what's out there
on my systems that would
be worth money to a threat.
Actor all my systems
worth money to a threat.
Actor How are my systems exposed
to the Internet
and what can I do today to kind
of shore my systems up and make sure
I'm doing my due diligence?
Because these numbers don't lie to
people.
There is value in this type
of information. There's value
in what these threat actors are
collecting and taking from these
organizations.
And if you think that any of us,
whether it's a personal system that
you use at home or it's your
business systems, if you think
any of those are immune,
you're living in a fantasy.
So you have to start considering,
even in the most
small of ways, how your
systems could benefit a threat
actor. So start taking those things
into account in your day to day
life and your day to day use of
systems in your business, use of
systems, whatever it may be.
We need to start thinking about how
do we protect ourselves and how
do we make the job of threat actors
that much harder in the long
run. So with that, I want
to thank you for your time today,
and I look forward to seeing you
again soon.