By Harish Chib, vice president, Middle East & Africa

REvil, also known as Sodinokibi, is a widely used, conventional ransomware-as-a-service (RaaS) offering that has been around since 2019. Criminal customers can lease the REvil ransomware from its developers, adding their own tools and resources for targeting and implementation. As a result, the approach and impact of an attack involving REvil ransomware is highly variable. This can make it hard for defenders to know what to expect and look out for.

The following information may help IT admins facing or proactively concerned with the impact of a REvil ransomware attack. The findings are based on insights from the Sophos Rapid Response team, which has investigated multiple cyberattacks involving REvil.

What to do immediately: contain and neutralize

The first thing you need to do is determine whether the attack is still underway. If you suspect it is, and you don’t have the tools in place to stop it, determine which devices have been impacted and isolate them immediately. The easiest option is to simply disconnect from all networks. If the damage is more widespread than a few devices, consider doing this at the switch level and taking entire network segments offline instead of individual devices. Only shut down devices if you can’t disconnect the network.

Second, you need to assess the damage. Which endpoints, servers and operating systems were affected, what has been lost? Are your backups still intact or has the attacker deleted them? If they are intact, make an offline copy immediately. Also, which machines were protected? They’ll be critical in getting you back on your feet.

Third, do you have a comprehensive incident response plan in place? If not, you need to identify who should be involved in dealing with this incident. IT admins and senior management will be required, but you may also need to bring in outside security experts and consult with cyber insurance and legal counsel. Should you report the incident to law enforcement and/or inform data protection authorities? There is also the question of what information you should give to employees, many of whom are likely to find a similar ransom note on their desktop.

Last, but definitely not least: you’ll need to contact these and other key people, such as customers, to let them know what’s happening, but the attackers may be eavesdropping so don’t use your normal channels of communication. If the intruders have been in your network for a while, they’ll probably have access to email, for instance.

What defenders can do

There are some proactive steps you can take to enhance your IT security for the future, including:

• Monitor your network security 24/7 and be aware of the five early indicators an attacker is present to stop ransomware attacks before they launch
• Shut down internet-facing remote desktop protocol (RDP) to deny cybercriminals access to networks. If you need access to RDP, put it behind a VPN or zero-trust network access connection and enforce the use of Multi-Factor Authentication (MFA)
• Educate employees on what to look out for in terms of phishing and malicious spam and introduce robust security policies
• Keep regular backups of your most important and current data on an offline storage device. The standard recommendation for backups is to follow the 3-2-1 method: 3 copies of the data, using 2 different systems, 1 of which is offline. Also test your ability to perform a restore
• Prevent attackers from getting access to and disabling your security: choose a solution with a cloud-hosted management console with multi-factor authentication enabled and Role Based Administration to limit access rights
• Remember, there is no single silver bullet for protection, and a layered, defense-in-depth security model is essential – extend it to all endpoints and servers and ensure they can share security-related data
• Have an effective incident response plan in place and update it as needed. If you don’t feel confident you have the skills or resources in place to do this, to monitor threats or to respond to emergency incidents, consider turning to external experts for help

Conclusion

Dealing with a cyberattack is a stressful experience. It can be tempting to clear the immediate threat and close the book on the incident, but the truth is that in doing so you are unlikely to have eliminated all traces of the attack. It is important that you take time to identify how the attackers got in, learn from any mistakes and make improvements to your security. If you don’t, you run the risk that the same adversary or another one might attack again in the future.

By: Tuhina Goel, Director of Product Marketing at Nutanix

Meet the nemesis: Ransomware 

Cybersecurity Ventures predicts[1] that Ransomware will cost its victims around $265 billion (USD) annually by 2031. Businesses will face a new attack every 2 seconds as Ransomware perpetrators progressively refine their malware payloads and related extortion activities. The data clearly suggests that it is not the question of if, but when a business is attacked by ransomware.

Shared storage has been an especially rich target for cybercriminals to hijack valuable customer, financial or sensitive information and extort payment in return for access to the data. Hence, revving up ransomware defense is a top priority for CIOs and other business leaders who are actively looking for storage security strategies against malicious cyber-attacks. 

Ransomware is a type of malware that attacks storage systems by encrypting user file shares and volumes. Victims are denied access to the encrypted data and make the data unrecoverable without paying a ransom for a decryption key.  There is substantial uncertainty that even if the ransom is paid that the data will be restored or that the attack is ended. 

Ransomware attacks cannot be detected by antivirus software or firewalls and cause tremendous losses, including lost productivity costs, forensic investigation costs, data restoration costs from backup, and the costs of hiring emergency consultants and crisis managers.

What businesses need is a cyber-security and Ransomware protection plan that is integrated with the storage system to detect, prevent, recover, and analyze cyber-attacks so that structured and unstructured data is protected, no matter where the data resides.

Nutanix Files Offers Integrated Ransomware Protection

The Nutanix Files software-defined storage solution has integrated Ransomware protection to help customers secure unstructured data. The latest version, Files 4.1, offers improved network isolation with network segmentation, better resource management with enhanced multi-network support, enhanced security with WORM support and Ransomware detection.

When combined with our Nutanix Data Lens SaaS-based data management and governance application, Nutanix Files delivers a full spectrum of Ransomware protection aligned to key defense-in-depth and critical cybersecurity initiatives like a Zero Trust Architecture (ZTA) spanning the NIST Cybersecurity Frameworks of Identify, Protect, Detect, Respond and Recover.

[1] https://cybersecurityventures.com/global-ransomware-damage-costs-predicted-to-reach-250-billion-usd-by-2031/

Aerodyne Group will take over its operations and use the building as its second global headquarters

The Malaysia Pavilion at Expo 2020 Dubai has been renamed Malaysia’s Technology and Innovation Hub to be a part of Expo City Dubai in UAE.

After the pavilion was decommissioned, officials from the Ministry of Science, Technology, and Innovation (MOSTI) handed it over to Aerodyne Group in a ceremony commemorating Malaysia’s participation in the expo’s five-year legacy programme.

The pavilion will be run by the Aerodyne Group, which will use it as their second international headquarters. Aerodyne Group, which is ranked first in the world by DII’s Drone Service Provider Ranking 2021, is a perfect match for the five-year legacy programme.

MOSTI spearheaded Malaysia’s participation in Expo 2020 Dubai, with the Malaysian Green Technology and Climate Change Corporation (MGTC) serving as the implementing agency. From October 1, 2021, to March 31, 2022, the Rainforest Canopy Pavilion, a 1,234 square metre, two-and-a-half-story structure, welcomed over a million visitors.

Malaysia is one of the pavilions selected to participate in the Expo’s five-year legacy programme, during which its structure will be repurposed and remain at Expo City Dubai, a “tech-enabled city of the future.”

“Malaysia is proud and honoured to be part of Expo City Dubai and will leverage opportunities at the centre envisioned to be a global hub for creativity and a model for cities of the future.

“We are excited to be part of the ‘most beautiful ambitions of Dubai’ as announced by His Highness Sheikh Mohammed bin Rashid Al Maktoum, Vice President and Prime Minister of the UAE and Ruler of Dubai.

”We congratulate the people and Government of Dubai on its new chapter and look forward to the opening of the city on 1 October 2022”, said MOSTI Secretary-General Datuk Zainal Abidin Abu Hassan, who is also the Commissioner-General of Malaysia for Expo 2020 Dubai.

In terms of the advantages Malaysia will gain from participating in the programme, he stated, “The UAE is also a major hub in the West Asian region, which serves as a gateway for Malaysian companies to explore new markets. Therefore, our participation in the 5-year-legacy programme can also help facilitate Malaysian companies’ access to the global market and highlight Malaysia’s comprehensive ecosystem, support, and infrastructure to investors.”  

Throughout the expo, Malaysia held weekly thematic trade and business programmes, led, and supported by 21 ministries, 70 agencies, and five state governments, promoting Malaysian innovations, products, and services.

“Through the concept of public-private partnership, MOSTI, together with the Ministries, Government Agencies and State Governments that focus on technology development, will continue to promote activities and market products and services to the UAE market.”

“The technology and innovation hub will also serve as a “soft landing zone” for the commercialisation and infusion of viable technology-based products and services for the Middle East regional market,” he added. 

Zainal Abidin also said that Aerodyne’s success internationally serves as an inspiration to Malaysian companies and will encourage more businesses to enter the global market, particularly in the fields of technology and innovation.

“The Malaysia Pavilion will serve as a platform for the government to strengthen and intensify its agenda forward and to encourage more start-ups and tech-base companies to go global. We are indeed very excited to see the ripple effect of this 5-year legacy on our industries,” he said.

Meanwhile, Aerodyne Group is enthusiastic to carry the torch for Malaysia in demonstrating the country’s commitment to sustainability and charting a future path.

“Through our tools, we want to push the world and ourselves to make more sustainable choices. It is an honour to be entrusted with Malaysia’s net-zero carbon pavilion.

“The strategic location of Dubai plays a vital role in expanding the reach of Aerodyne’s services and placing drones centre-stage at the global level. We envision that the pavilion will become a hub for all things drones, a conduit for innovation, a space for all drone enthusiasts, and a place for excellence,” said Aerodyne founder and group CEO, Mr. Rabih Bou Rached.

UAE-based Medad Technology is demonstrating its “misting” technology and game-changing ultrasound nicotine delivery device, NEB Mist, at the 2^nd annual World Vape Show, which will run until June 18th at Dubai World Trade Centre.

Under the theme ‘Ultrasound is the Future of Nicotine Delivery’, Chief Technology Officer of Medad Technology, Prof. Imad Lahoud, will showcase NEB Mist – an ultrasound-based alternative to tobacco and e-cigarettes which produces no detectable carcinogenic agents known to cause smoking-related diseases.

The EU’s Tobacco Products Directive and the UK’s Medicines and Healthcare Products Regulatory Agency (MHRA) have extensively tested and analyzed NEB Mist emissions and confirmed the absence of carbonyls in the mist it produces. The device has been licensed by both organizations which is also registered locally with Emirates Authority for Standardization and Metrology (ESMA).

Part of a panel discussion on Vaping Research and Public Health on June 16, Prof. Imad will highlight the benefits of replacing heat with ultrasound for nicotine delivery, and the opportunity this presents to reduce harm and save lives.

Medad Technology has invested US$50 million over the past four years to develop, manufacture, and test its ultrasound technology, and secure regulatory approval in the UAE and international markets. The company plans to invest a further US$100 million over the next three years in clinical trials, smoking cessation research and product development across its other sectors.

Mohammed Alshaiba Almazrouei, Chief Executive Officer of Medad Technology, said: “At Medad Technology, we are committed to developing and investing in technologies that improve public health and quality of life. Through our patented ultrasound technology, we aim to not only reduce harm caused by tobacco smoking and e-cigarettes, but also encourage people to stop smoking completely. At the World Vape Show, we look forward to showcasing the world’s first ultrasound nicotine delivery system (UNDS) with zero carbonyls.”

Standard electronic nicotine delivery systems (ENDS), and other reduced-risk alternatives to tobacco smoking, rely on electronic heating elements such as heated coils to create a vapor which releases chemicals known to cause smoking related diseases. In contrast, NEB Mist uses ultrasound to aerosolize a liquid containing pharmaceutical-grade nicotine into a mist. By using vibrations instead of heat, the harmful carcinogenic agents commonly found in cigarettes and e-cigarettes are undetectable.

Additionally, NEB Mist ensures the safest experience possible by capping each inhalation to a maximum of five seconds, ensuring no heat is generated from excessive vibrations and preventing harmful chemicals from being produced. Its smart technology detects overheating at any point and blocks the device, sending the user a push notification advising them to take a break.

As a smart device, NEB Mist features a one-time programmable (OTP) chip. This not only prevents the use of counterfeit liquids with potentially dangerous ingredients but also enables authentication and device activation to prevent underage usage. NEB Mist has a dedicated mobile app which is the first-of-its-kind to be approved on the Appstore globally. It connects to the device and provides usage data, allowing the user to monitor their habit and potentially reduce their nicotine intake. 

Speaker: Mohammad Al Abbadi- Executive Manager- Alliance Traffic System

Technology has revolutionised the way we live our lives. Over the last decade, technology has played a major role in many fields, including mobility and transportation. While driverless vehicles and flying taxis have received massive media coverage and breakneck traction from pros and novices alike, one of the areas where road transportation innovation has had the most impact is road safety.

Innovation with the aid of new technology is one of the most significant components for improving operations and safety in the road transport business. Technology is disrupting industries across the globe, bringing solutions to reduce the fatal accident rates on the roads to zero and to make operations more time and cost effective, and solving problems in new and innovative ways.

Better and safer lifestyle for drivers

In addition to improving automobiles, technology is also being utilised to improve driver lifestyle and efficiency. Alliance Traffic Systems, a total solutions provider of cutting-edge intelligent transportation systems, traffic management, and Artificial Intelligence Enforcement solutions, is investing massively to enhance drivers’ lifestyle through many innovative ways.

To boost skill development, Alliance invests in the most up-to-date roads security and safety tools, with the objective of making road commute safer.

The prospect of automation

It’s hard to overlook the opportunities brought about by automation when it comes to road safety innovation. We are already seeing elements of the automation puzzle fall into place as the reality of driverless automobiles approaches. However, one of the most difficult challenges is gaining the trust, support, and understanding of other road users and the public. Along with legislative and infrastructure changes, public education campaigns will be required for the deployment of self-driving vehicles. But more important, to enhance the safety of current roads in order to reach the level of having solid foundations for new technologies implementation.

Additionally, new AI Radars technology, which is fast changing every facet of life, provides a safer, smarter, and enhanced lifestyle at a reasonable cost that exceeds industry standards in ease and security, from safe and smart cities to connected living. Smart Radars integration is enabling a more powerful, efficient, and secure future for safety, automotive, transportation, security, and other industries.

Cooperation is the way to a thriving industry

In the short term, embracing technological innovation will help modernise the sector and make it safer. As demand for driverless vehicles and radars grows, road safety must evolve, with developing technologies like platooning systems playing a cardinal role in the long run.

Every stakeholder in the sector must work together to harness the opportunities offered by innovation, but this will take time and buy-in from everyone, including governments and regulators, who must ensure the industry has the necessary legislative and regulatory environment to make the desired impact. Technology and innovation are proven to bring extensive benefits to road safety, but these benefits will only be realised if all actors in the industry have access to these opportunities.