Cloud Region Held Hostage
A ransomware attack knocked out part of Japan's IDCF Cloud, disrupting a service used by 495 companies and local governments.
Key terms
AP Cybersecurity alignment
- 2.1.C.6In the taking-action phase of an attack, adversaries act on their objectives by collecting targeted data, exfiltrating it, and disrupting services or destroying data.Learning objective: Describe the phases of a cyberattack.
- 2.1.E.2Risk avoidance stops the activity that is generating the risk. If the activity is a critical part of an organization’s mission or purpose, then avoidance is not possible.Learning objective: Identify strategies for managing risk.
- 4.1.D.1Risk from device vulnerabilities can come from unauthorized access or malware that allow an adversary to impersonate an authorized user, remotely control a device, encrypt a device’s drive to ransom the data, or wipe a…Learning objective: Assess and document risks from device vulnerabilities.
AP Networking alignment
- 4.1.A.2Violations of the CIA triad often occur together, resulting in greater impact. Understanding the full scope of an incident requires investigating what happened, who was affected, and how data or services were impacted.…Learning objective: Identify evidence of compromised confidentiality, integrity, or availability.
- 4.1.A.5When availability is compromised, systems have unexpected periods of time when they are out of service. A breach of availability can be identified by: • an inability to access systems, networks, or resources • slow or dropped…Learning objective: Identify evidence of compromised confidentiality, integrity, or availability.
- 4.1.B.1Network connectivity supports essential tasks such as communication, data access, and service delivery. When connectivity is unreliable, users or employees may lose access to essential systems, which can lead to delays,…Learning objective: Explain how unreliable connectivity impacts organizations.