Earlier this year, the FBI cyber division released a flash bulletin regarding LockBit 2.0, an update to the RaaS, which noted these attacks are difficult to defend against because of the wide variety of tactics, techniques and procedures they employ. However, the bureau did offer some tips to mitigate against risks from LockBit 2.0:

Require all accounts with password logins (e.g., service account, admin accounts, and domain admin accounts) to have strong, unique passwords. Passwords should not be reused across multiple accounts or stored on the system where an adversary may have access. Devices with local administrative accounts should implement a password policy that requires strong, unique passwords for each individual administrative account.
Require multifactor authentication for all services to the extent possible, particularly for webmail, virtual private networks, and accounts that access critical systems.
Keep all operating systems and software up to date. Prioritize patching known exploited vulnerabilities. Timely patching is one of the most efficient and cost-effective steps an organization can take to minimize its exposure to cybersecurity threats.
Remove unnecessary access to administrative shares, especially ADMIN$ and C$. If ADMIN$ and C$ are deemed operationally necessary, restrict privileges to only the necessary service or user accounts and perform continuous monitoring for anomalous activity.
Use a host-based firewall to only allow connections to administrative shares via server message block from a limited set of administrator machines.
Enable protected files in the Windows Operating System to prevent unauthorized changes to critical files.

Related:

Special Reports /

Most industries seeing relief from ransomware, but insurance isn't one

Related Stories

Recommended For You