10/5/2020 r"! 1 ! 99 I..1 I E l I NN What is - - PDF document

10/5/2020 1

r"!

• 1!
• 99
• I..1

I E l I NN

What is Cybersecurity?

noun measures taken to protect a computer or computer system (as on the Internet) against unauthorized access or attack Simply put, cybersecurity is protection against digital attacks. cy·ber·se·cur·i·ty /ˌsībərsiˈkyo ͝orədē/

The information provided here is for informational and educational purposes and current as of the date of publication. The information is not a substitute for legal advice and does not necessarily reflect the opinion or policy position of the Municipal Association of South Carolina. Consult your attorney for advice concerning specific situations.

10/5/2020 2

Why is Cybersecurity so important?

One million seconds is roughly equal to 11.5 days. One billionseconds is roughly equal to 31.75 years. As of 2017, there were 8.4 billion IoT devices. By 2020, that number will exceed 20.4 billion devices. Every second, another 127 devices are connected to the internet

Cyber crime by the numbers

Letsput itin perspective: · Tesla, Facebook, Microsoft, Apple, Amazon, and Walmart combined annual revenue totals "just" $1.28

• trillion. Cyber crime earns $1.5 trillion annually.

· The $1.5 trillion that cybercriminals earn is equal to Russia's gross domestic product (GDP) · If cybercrime were a country, it would have the 13th highest GDP in the world.

10/5/2020 3

What’s the big deal about Cybersecurity?

Businesses experience ransomware attacks every 14 seconds According to Kaspersky Lab businesses experienced a ransomware attack every 14 seconds in 2019 up from every 2 minutes just several years ago. This is expected to increase to every 11 seconds by 2021. Currently, there are more than 4,000 ransomware attacks every day. -FBI

Email is the number #1 delivery vehicle for most malware and ransomware. Verizon reports that users in the U.S open 30 percent of phishing all emails, with 12 percent of those targeted by these emails clicking on the infected links or attachments. 95% of malware is delivered via email Fake invoicemessagesare the #1 type of phishingemail

Are you training your users? Are you doing more than just sending out emails or

• nline training?

What’s the big deal about Cybersecurity?

Millennials are the mostimpacted group of people by cyber crime. This is potentially because they are the most technologically savvy group. In any case, around 53 percent of millennials experienced cyber crime in the last year.

10/5/2020 4

Social Engineering on Facebook

Seems innocent at first but.... but now we have their names and dates of birth. Photos on their profile give you the rest

• f information needed.

Social Engineering on Twitter

From Twitter: The attackers successfully manipulated a small number of employees and used their credentials to access Twitter's internal systems, including getting through our two-factor protections. As of now, we know that they accessed tools only available to our internal support teams to target 130 Twitter accounts. For 45 of those accounts, the attackers were able to initiate a password reset, login to the account, and send Tweets.” The forty-five included: Bill Gates, Elon Musk, Jeff Bezos, Kanye West, Uber, Apple, Barack Obama, and Joe Biden.

Social Engineering on Twitter

We are giving back to our community. We s and we believe you should too! All Bitcoin sent to our address b you doubled!

bc1qyv2knrivnircnt7n7nilvrf24.1:4

0 Warren Buffett 0 @Wa r I am giving back to my co All Bitcoin sent to my add $1,000, I will send back $ bc1qxy2kgdygjrsqtzq2n0 A Only

h a v e d e c i d e d t o g i v e b a c k t o m y c o m m u n i t y . All Bitcoin sent to my address below will be sent back

• doubled. I am only doing a maximum of $50,000,000.

bc1qxy2kgdygjrsqtzq2n0yrf2493p83kkfjhx0w1h Enjoy!

2:07PM• Jul 15,2020TwitterWebApp

Only doing this for the next 30 minutes! Enjoy. Q 27 n. 47 0 70

10/5/2020 5

Social Engineering on Twitter

12.87 BTC = $144,573.86(as of July 29, 2020)

What’s the big deal about Cybersecurity?

A small heating and air conditioning firm in Pennsylvania that worked with Target and had suffered its own breach via malware discovered in an email. In that intrusion, the thieves managed to steal the virtual private network credentials that the firm’s technicians used to remotely connect to Target’s network. Hackers used that initial foothold provided by the firm’s hack to push malicious software down to all

• f the cash registers at more than 1,800 stores

nationwide.

0 0 0 0

40 million

creditandcubcardscompromised

70 million

customerdet, .. 1

0 0 i 0 8

0 1 1

• ;
• S

ect

W h a t ’ s t h e b i g d e a l a b o u t C y b e r s e c u r i t y ?

T A R G E T ' 1 9 1 -

404- laWsuits

A i l e d a g a i n s t

• T a r g e t

a s a r e s u l t

• i

t h e b r e a c h

10/5/2020 6

City of Atlanta Headline: “Atla The Georgia ca ransomware at crew on March able to use the were still writin

• closed. Residen

airport. Attackers dema dealing with a Bottoms.

What’s the big deal about Cybersecurity? What’s the big deal about Cybersecurity?

e r

Geor

The h comm into far as

10/5/2020 7

What’s the big deal about Cybersecurity?

State of Texas Texas is the latest state to be hit with a cyberattack, with state officials confirming this week that computer systems in 22 municipalities have been infiltrated by hackers demanding a ransom. A mayor of one of those cities said the attackers are asking for $2.5 million to unlock the files.

What’s the big deal about Cybersecurity?

3 Alabama Hospitals Pay Hackers Ransom to Restore System

After a ransomware attack, DC1-I Health System closed its three hospitals to new patients and launched downtime procedures:

• fficials nAiri tha r, .

But by Saturday, the three impacted hospitals remaineddosed to all but the most critical new

• patients. While collaborating with law enforcementand an outside ITsecurity firm, officials said they

paid the ransom to receive a decryption key fromthe hackers and restore access to the impacted systems. 11911111Mitiro Okeidsput (charmia (denliirch

S t r e g 4 r P u

t a t u s

• >

z4`..'"s

f rod

e r

*OWr

e s P °

r s e ? d

l

What’s the big deal about Cybersecurity? RansomwareAttack on IT Vendor Disrupts Care at 110 Nursing Homes \

Virtual Care Provider, an g vendor supporting 110 nursing homes and acute care sites, was hit with a ransomware attack last week, \ cutting off electronic health record access for those providers. For VCPI, the data encrypted all of the data it hosts for its 110 clients, with hackers demanding a ransom of $1.4 million in bitcoin to decrypt patient records. Officials said they can't afford to pay the ransom demand and some clients are at risk of shutting down their operations if VCPI can't recover.

t

10/5/2020 8

South Carolina Critical Infrastructure Cybersecurity Program

sATDDRiv

10/5/2020 9

S5fafr ofoSeufli Grill:inn

ePerufilit pepartmenf

(Office of file Governor

EXECUTIVE ORDER O. 2017-08

Collaboration Coordination Information Sharing Training & Workforce Development

Collaboration

10/5/2020 10

Coordination

Information Sharing

Training & Workforce Development

10/5/2020 11

8302:W1083U S1N3A3 H3E1A0 30N3011131N1 ON1e1011NOIN C1NV ONINIV1:11 1VOLLIH0 oNiHna '2 NOI1VVJHOdNI NO11/3313C' A111:11103SHREIA0 3SNOdS32:11NRCIIONI 1V31:11-11HRSAO NOIS111:11NI

SS* 101r .Y.

Jawao uoReup000

J eqA0

• s

CLO Program

Sewl

SC-CIC Cyber Liaison Officer South Carolina Critical Infrastructure C ybersecunty

Report Cyber Incidents: cyber@sled.sc.gov Cyber 24/7 Phone Line: 803-896-7133 SLED CLO: 803-354-0664 Submit Suspicious Cyber Activity: www sciic org/cyber

CLO ID# 12162749525 South Carolina Critical Infrastructure Cybersecurity Program

CLO Contact

To sign up for our program, email sfay@sled.sc.gov S/SA Sean Fay Cyber Liaison Officer