11
1 Is Your MSP Offering Able to Protect Against the Latest Threats? Sarah Morgan

Is Your MSP Offering Able to Protect Against the Latest ... · Real Threats –Current Threat Landscape Source: Webroot Threat Research 2018 Malware & PUAs Ransomware RDP Incursions

  • Upload
    others

  • View
    4

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Is Your MSP Offering Able to Protect Against the Latest ... · Real Threats –Current Threat Landscape Source: Webroot Threat Research 2018 Malware & PUAs Ransomware RDP Incursions

1

Is Your MSP Offering Able to Protect Against the Latest Threats?

Sarah Morgan

Page 2: Is Your MSP Offering Able to Protect Against the Latest ... · Real Threats –Current Threat Landscape Source: Webroot Threat Research 2018 Malware & PUAs Ransomware RDP Incursions

2

About Webroot

» #1 with MSPs (35%+ endpoint security share)

» #1 in North American retail market share

» #1 in Threat Intelligence – BrightCloud® Threat

Intelligence

» Trusted and deployed by more than 70 leading security vendors

» More than 700 employees in 6 countries

» Industry-leading customer satisfaction

December 11, 2018 Public2

40+ MillionLICENSED ENDPOINTS

27+ MillionOEM USERS

13,000+ MSP PARTNERS

3000k+ BUSINESS CUSTOMERS

Who We Secure

Page 3: Is Your MSP Offering Able to Protect Against the Latest ... · Real Threats –Current Threat Landscape Source: Webroot Threat Research 2018 Malware & PUAs Ransomware RDP Incursions

3

Real Threats – Current Threat Landscape

Source: Webroot Threat Research 2018

Malware & PUAs Ransomware RDP Incursions

Malicious

URLs & IPs Phishing Cryptojacking

The amount of daily

ransomware attacks

since the beginning

of 2016

(Source: CyberSense)

4,000

Projected losses

worldwide by 2020

from cybercrime (up

from 3 trillion 2015)

(Source: Cybersecurity Ventures)

$6 Trillion

(Source: Better Business Bureau)

Percentage of small

companies facing

existential risk

within 30 days of a

major data loss

65%

Percentage of hacking-

related breaches

leveraging stolen

and/or weak passwords

(Source: 2017 Verizon DBIR)

80%

Most Prevalent Threats

#1#3 #2

Page 4: Is Your MSP Offering Able to Protect Against the Latest ... · Real Threats –Current Threat Landscape Source: Webroot Threat Research 2018 Malware & PUAs Ransomware RDP Incursions

4

Ransomware Debuts Late 2013 with CryptoLocker

Page 5: Is Your MSP Offering Able to Protect Against the Latest ... · Real Threats –Current Threat Landscape Source: Webroot Threat Research 2018 Malware & PUAs Ransomware RDP Incursions

5

Remote Desktop Protocol (RDP)

December 11, 2018 Public5

https://www.webroot.com/blog/2016/11/23/remote-desktop-protocol-attacks-need-know/

Admins use RDP to

control servers

remotely

RDP gives attackers

admin access to your

entire network

Attackers can easily

scan for a vulport

Accounts can

usually be cracked

with brute force

Page 6: Is Your MSP Offering Able to Protect Against the Latest ... · Real Threats –Current Threat Landscape Source: Webroot Threat Research 2018 Malware & PUAs Ransomware RDP Incursions

6

The Rise of CryptoJacking

Page 7: Is Your MSP Offering Able to Protect Against the Latest ... · Real Threats –Current Threat Landscape Source: Webroot Threat Research 2018 Malware & PUAs Ransomware RDP Incursions

7

Cryptojacking

December 11, 20187

» Dethroned ransomware as #1 threat

» Highly profitable

» Minimal illegal footprint

» Works on ANY device

» Causes power bills to skyrocket

» Mining energy use doubles every 6

months

» Projected to be ~.3% of world’s

electricity consumption by late 2018

01

02

03

04

05

06

07

Page 8: Is Your MSP Offering Able to Protect Against the Latest ... · Real Threats –Current Threat Landscape Source: Webroot Threat Research 2018 Malware & PUAs Ransomware RDP Incursions

8

C:\Windows\system32>nslookupDefault Server: [192.168.1.1]Address: 192.168.1.1

> www.chase.comServer: [192.168.1.1]Address: 192.168.1.1

Non-authoritative answer:Name: wwwbcchase.gslb.bankone.comAddresses: 192.168.1.11Aliases: www.chase.com

> www.amazon.comServer: [192.168.1.1]Address: 192.168.1.1

Non-authoritative answer:Name: d3ag4hukkh62yn.cloudfront.netAddresses: 192.168.1.11Aliases: www.amazon.com

www.cdn.amazon.com

> www.office.comServer: [192.168.1.1]Address: 192.168.1.1

Non-authoritative answer:Name: f-0001.f-msedge.netAddresses: 192.168.1.11Aliases: www.office.com

geo.home.office.akadns.netus_edge.home.office.akadns.nethome-office365-com.f-0001.f-msedge.net

DNS Cache Poisoning

Page 9: Is Your MSP Offering Able to Protect Against the Latest ... · Real Threats –Current Threat Landscape Source: Webroot Threat Research 2018 Malware & PUAs Ransomware RDP Incursions

9

Products: A Smarter Cybersecurity® Approach

December 11, 2018 Public9

Processing Machine learning, contextual analysis, behavioral analysis

Data Product behavior, user behavior, threat data, embedded threat intelligence

Management Advanced API, policy management, reporting, third-party integrations

Secure

Anywhere

Consumer

Endpoint Protection Network Protection User Protection Threat Intelligence

Secure

Anywhere

Business

Secure

Anywhere

DNS Protection

FlowScape®

Network Threat

DetectionSecurity Awareness Training

Mobile File

BrightCloud®

Embedded T.I.Internet

Page 10: Is Your MSP Offering Able to Protect Against the Latest ... · Real Threats –Current Threat Landscape Source: Webroot Threat Research 2018 Malware & PUAs Ransomware RDP Incursions

10

Thank you.

Sarah Morgan

[email protected]

Page 11: Is Your MSP Offering Able to Protect Against the Latest ... · Real Threats –Current Threat Landscape Source: Webroot Threat Research 2018 Malware & PUAs Ransomware RDP Incursions

#NGC18 @TheChannelCo

Don’t Forget to Rate This Session in the App!

How to Rate Sessions:

1. Tap on Event Agenda icon

2. Tap on the session you want to rate

3. Tap how many stars

4. Write a review (if you want)

5. Submit!