Pratica di Shadowing: NotPetya Attack - Impara a parlare inglese con i video

This is one of the big cyber attacks.

NotPetya was the most damaging cyber attack in the history of the internet at the time.

And although it was a piece of malicious ransomware on the surface, the attack wasn't really about money.

It was about something much, much greater and much more sinister.

WannaCry, Petya, and NotPetya.

These were all infamous pieces of ransomware.

But NotPetya was in a league of its own.

As NotPetya spread and infected systems and security experts began to analyze it, a different reason for its creation emerged.

NotPetya was designed for cyber warfare.

When an entire country's infrastructure, such as the power grid, bus stations, banks, airports, and gas stations were affected by the most devastating a cyber attack to have ever occurred,

it became scarily apparent how much damage can be done with a cyber weapon.

No lives were lost due to NotPetya, but the impact was incomparable to any previous attack.

Hey, I'm Rob Witcher.

In this video series, we explore some of the biggest cybersecurity breaches in modern history.

If you find cybersecurity as fascinating as I do, then please subscribe and hit the bell icon to get notifications when we release new videos.

On June 27th, 2017, it was the summer eve of Ukrainian holiday Constitution Day.

Suddenly, computers around the country began to show one of two different screens,

a repairing file system on C with a stark warning to not turn the computer off, or a classic ransomware screen which read,

oops, your important files are encrypted, and demanded a payment of $300 worth of bitcoin to decrypt the files.

The attack began to spread across Ukraine, and then the globe.

It was reported by Kaspersky that within a single day, NotPetya had infected systems in France, Germany, Italy, Poland, the United Kingdom, and the United States.

The majority of infections, however, targeted Ukraine.

In fact, 80 % of infections in the first 24 hours were located in Ukraine.

As people's screens began to go black, no one truly realized that this was the beginning of the biggest cyber attack in history.

To understand not Petya, you first need to be familiar with Petya.

Petya was first discovered in March 2016, a piece of ransomware

that was said by Checkpoint at the time to have been immediately flagged as the next step in ransomware evolution.

It was named Petya after one of the Soviet weapons satellites from the James Bond movie, GoldenEye.

And in the hacking world, just like in the James Bond films, it's always the Russians, right?

2017 was a big year for ransomware attacks.

Just a month earlier, the infamous WannaCry attack had affected hundreds of thousands of computers across 150 countries, causing millions of dollars in damages.

And then in June, something even more damaging hit.

Kaspersky dubbed this new ransomware NotPetya.

This variant had major differences to the original Petya ransomware.

One of the main differences was that NotPetya had been created to spread quickly.

To date, it was simply one of the fastest propagating pieces of malware we've ever seen, said Craig Williams from Cisco's Talos division,

one of the very first security companies to investigate NotPetya and reverse engineer it.

He further told Wired, by the second you saw it, your data center was already gone.

NotPetya was spreading like wildfire, and it was targeting Ukraine's infrastructure.

And it then began to spread globally through companies who operate branches within Ukraine.

Anyone who thinks this was accidental is engaged in wishful thinking, Williams continued.

This was a piece of malware designed to send a political message.

If you do business in Ukraine, bad things are going to happen to you.

NotPetya affected countless small and large -scale companies, including Maersk, the world's largest container shipping company, Merck, a U .S pharmaceutical company,

Saint -Gobain, a French construction materials company, and even an Australian chocolate factory.

Various marketing firms, law firms, oil companies, and railway companies around the world were reeling from the chaos of NotPetya.

To understand this hack, it's worth knowing a little bit about the political context that led to it.

Russia and Ukraine have been engaged in an ongoing war since early 2014.

The conflict, like all conflicts, has a complex background, and some of the key moments surrounded Russia's annexation of the Ukrainian territory of Crimea

and conflicts surrounding the status of the Ukrainian region of Donbas.

According to human rights groups, around 13 ,000 Ukrainians have died since the conflict broke out in early 2014.

In 2017, NotPetya was quickly attributed to Russian hackers.

And this wasn't the first time Russians had used cyber warfare tactics against Ukraine.

Since 2014, they've attacked the Ukrainian power grid in the depths of the cold winter , attacked railways and other critical infrastructure,

and rigged election websites in their relentless hybrid warfare tactics.

Joshua Korman, a cybersecurity fellow at the Atlantic Council, said, The physics of cyberspace are wholly different from every other war domain.

And cyberspace has been one of the main fronts on this war from the start.

Russia have been essentially using Ukraine as a test lab for their latest innovations in cyber warfare.

Former Homeland Security Advisor Tom Bossert said that according to White House assessments, the NotPetya attack resulted in more than 10 billion,

with a B, billion in damages.

To put that into perspective, the previous WannaCry attack of the previous month resulted in an estimated 4 to 8 million in damages.

That's less than a tenth of a percent of the cost of NotPetya.

On October 20th, 2020, the United States Justice Department charged six Russian government hackers with the NotPetya attack

and the attacks on the power grid in the Ukraine.

No country has weaponized its cyber capabilities as maliciously or irresponsibly as Russia,

wantonly causing unprecedented damage to pursue small tactical advantages and to satisfy fits of spite, said John Demers, U .S.

Assistant Attorney General for National Security.

Today, the department has charged these Russian officers with conducting the most disruptive

and destructive series of computer attacks ever attributed to a single group, including unleashing the NotPetya malware.

No nation will recapture greatness while behaving in this way.

Strong words from the U .S.

NotPetya was so far -reaching and spread so quickly because it took advantage of two exploits, Eternal Blue and Mimikatz.

Used in tandem, these exploits allowed NotPetya to rip through machines around the world at a downright alarming rate.

Eternal Blue is the exploit created by the U .S.

National Security Agency, the NSA.

Eternal Blue takes advantage of a vulnerability in Windows SMB,

Server Message Block Protocol, a network protocol that enables users to communicate with remote computers and servers across a network.

Eternal Blue was leaked to the world in early 2017.

And although Microsoft had released a patch for the vulnerability as soon as it was disclosed, many computers around the world had not yet been patched.

MemeCats was an older invention created by a French security researcher in 2011.

It was released to show that Windows passwords could be found deep within RAM random access memory of a computer.

If hackers could gain even just guest accounts or limited access to a computer once inside,

they could use Mimikatz to find other users' passwords and hack into other computers using those same credentials.

The use of EternalBlue and Mimikatz together made for a scarily powerful piece of ransomware.

You can infect computers that aren't patched, and you can grab the passwords from those computers to infect computers that are patched,

said Benjamin Delpy, the researcher behind Mimikatz.

This meant that even patched computers weren't necessarily safe from the NotPetya rampage.

It was especially efficient within networks with multi -user computers, as it would automatically jump from one computer to the next within the network at lightning speeds.

It's often unclear whether paying the ransom associated with a ransomware

attack will actually allow users to gain access to their computers and files again.

But in this case, it was clear -cut.

No key existed to unencrypt the content.

NotPetya was purely built for one thing, maximum destruction.

It's also sometimes unclear whether a cyber attack can be labeled as cyber warfare.

But in the case of Notpetya, it was an open and shut case.

This was clearly an attack of cyber war against Ukraine, perpetrated by Russia.

The Linkos Group is a small, family -run Ukrainian software business.

They create and maintain a piece of software known as MEDOC, a piece of accounting software similar to TurboTax,

which almost everyone in the Ukraine uses to do their taxes online.

100

But on June 27th, 2017, the Linkos Group headquarters suddenly became ground zero for the release of the NotPetya ransomware.

101

Back in the spring of 2017, the hackers had targeted this small family -run business and hijacked their update servers.

102

They used these as a backdoor into thousands of Ukrainian households through the ME -DOC software, the accounting software that everyone uses and has downloaded on their computers.

103

By the summer of the same year, the Russians were poised and ready to pounce, using this backdoor to unleash the malicious software on the Ukraine and the world.

104

Being the most damaging cyber attack ever, you'd hope there'd be some takeaways from it.

105

So what have we learned from NotPetya?

106

Ransomware isn't going away.

107

Attacks are likely to get more and more sophisticated.

108

The best approach for any business is to assume that being hit by ransomware is inevitable.

109

It's going to happen.

110

This means having plans in place and knowing how to execute them

111

and knowing how long it would take to get things back up and running for your business.

112

It also means training in disaster recovery for these scenarios so

113

that everyone involved knows their roles and responsibilities in the case of a cyber incident like a ransomware attack.

114

You need to have a plan and you need to know

115

that that plan is going to work properly in the event of an actual cyber catastrophe such as NotPetya.

116

The importance of businesses taking back up seriously was highlighted especially clearly in the case of global shipping company Maersk, who reportedly didn't have proper backups in place.

117

The only reason they were able to access their data was

118

due to a power outage in one of their remote offices in Ghana.

119

A total fluke in West Africa had left one domain controller safe from the destructive forces of NotPetya,

120

and Maersk were luckily able to recover from this one data center that had been accidentally offline.

121

We need to be regularly backing up our data, and to help avoid ransomware, it is a good practice to use different encryption keys for our backups.

122

But the biggest thing we've learned from NotPetya is

123

that cyber warfare against a country's critical infrastructure isn't an abstract concept from science fiction anymore, something that might happen in the future.

124

Cyber weapons have already been used by governments against other nations.

125

It's a real issue that is occurring today, and it seems extremely likely that cyber warfare will only become more prevalent.

126

Notpetya's impact on Ukraine's infrastructure highlighted the far -reaching consequences of cyber attacks of this nature, affecting the power grid, transportation infrastructure, and banks.

127

Previous attacks have shown that healthcare infrastructure can also be vulnerable.

128

This is the beginning of a new age of warfare, attacking an enemy nation not just physically, but digitally as well.

129

This was one of the most fascinating and terrifying cyber attacks, and one of the costliest and most damaging to have ever occurred.

130

Although the U .S have officially charged Russian government hackers with the NotPetya attack, it doesn't seem likely that these attacks will disappear in any way.

131

In fact, it's highly plausible that an attack like this could happen against the United States or other countries.

132

It's clear

133

that countries need to be putting resources into trying to protect critical infrastructure from attacks such as this

134

and planning for disaster recovery when such an attack does occur.

135

If you found this video interesting and informative then please hit the thumbs up button

136

and let us know in the comments below what breaches you want us to cover in future videos.

137

See you in the next one.

✨ Video consigliato

364 frasi

Cos'è la tecnica dello Shadowing?

Shadowing è una tecnica di apprendimento delle lingue supportata da studi scientifici, originariamente sviluppata per la formazione dei traduttori professionisti e resa popolare dal poliglotta Dr. Alexander Arguelles. Il metodo è semplice ma potente: ascolti un audio in inglese di madrelingua e lo ripeti immediatamente ad alta voce — come un'ombra che segue il parlante con un ritardo di solo 1–2 secondi. A differenza dell'ascolto passivo o degli esercizi di grammatica, lo shadowing costringe il tuo cervello e i muscoli della bocca a elaborare e riprodurre simultaneamente i modelli di discorso reale. La ricerca dimostra che migliora significativamente la precisione della pronuncia, l'intonazione, il ritmo, il discorso connesso, la comprensione dell'ascolto e la fluidità del parlato — rendendolo uno dei metodi più efficaci per la preparazione alla prova di speaking dell'IELTS e per la comunicazione reale in inglese.

Tecnica dello shadowing: leggi la guida completa passo dopo passo →

Pratica di Shadowing: NotPetya Attack - Impara a parlare inglese con i video

World's Deadliest Computer Virus: WannaCry

Most Expensive Mistakes In History

Python3 For Pentesting - Introduction

ما هي NotPetya ؟ تعرف على أكبر سرقة لبنك روسي من قراصنة مهرة

Russians are terrified about their airports closing

Cybersecurity Architecture: Data Security

Pokemon Go était lié à la CIA…

Linux got wrecked by backdoor attack

The Worst Sponsorships in YouTube History

The Gaming Market is Starting to Break.

The Anatomy of Fraud

The most interesting "hack" in history...

Informazioni su questa lezione

Cos'è la tecnica dello Shadowing?