• taladar@sh.itjust.works
    link
    fedilink
    arrow-up
    0
    ·
    7 months ago

    Usually those are the ones all those companies and organizations are using who have their files encrypted by malware.

    • lud@lemm.ee
      link
      fedilink
      arrow-up
      0
      ·
      edit-2
      7 months ago

      Yes that’s because pretty much all companies use AD and exchange is also popular (but less so now with exchange online)

      Both are also extremely valuable for companies and thus attackers.

      Ransomware attacks pretty much always rely on missconfiguration and/or social engineering.

    • 4am@lemm.ee
      link
      fedilink
      arrow-up
      0
      ·
      7 months ago

      Correlation != Causation.

      Now, on the other hand, the number of breaches has gone way up recently. Microsoft has pushed AD and Exchange into the cloud recently. And they just had several instances where keys were stolen and passwords were left in the clear for months after they were notified, as well…

      Well we have no solid evidence but it’s certainly within the realm of possibility.