- Published
- Source
- SecurityWeek
- Filed under
- Ransomware, Law & courts, Attacks
The suspect is believed to be Edward Dubrovsky, a Canadian cybersecurity executive who was visiting the United States for a conference.
Originally reported bySecurityWeekRead the full story on SecurityWeek (opens in a new tab)
Share this storyLinkedIn (opens in a new tab)X (opens in a new tab)WhatsApp (opens in a new tab)Email
What defenders check after a story like this
- Backups kept offline or immutable – and a restore you have actually tested.
- Multi-factor authentication on every remote way in, with VPNs and firewalls patched first.
- Alerts for the warning signs: new admin accounts, security tools switched off, mass file changes, large uploads.
More helpNCSC: mitigating malware and ransomware attacks (opens in a new tab)
MyCyberWay training
Blue Team Specialist
Breaches like this get investigated, not just reported.
Blue Team Specialist takes the Analyst curriculum and adds the investigator's work: one incident owned end to end, hypothesis-led threat hunting with MITRE ATT&CK and KQL, breach analysis, and a root cause report people can act on.
- Scope, attacker path and dwell time
- Threat hunting with ATT&CK and KQL
- Root cause analysis and reporting
MyCyberWay career serviceBook a free 20-minute fit call.Book a free fit call (opens in a new tab)
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
