Skip to main content

Advanced Search

Projected result for your current search: 0

Search Operators:

You can use operators in your search query to narrow down your results even more. Click on the search operator to see an explanation of how it works.
Finds documents with exactly this word group, in exactly this word order and spelling (e.g. "employer branding").
Finds documents with both search terms (e.g. sales AND bonus).
Finds documents with one or the other search term (e.g. porsche OR volkswagen).
Finds documents with all search terms. Blank space is understood as AND (e.g. man robot production).
Finds documents with no appearance of the word behind NOT (e.g. ford NOT "harrison ford").
Finds documents where the search term is mentioned at least "n" times."n" may be any number (e.g. COUNT(gear)>8).
Finds documents with both search terms in any word order, permitting "n" words as a maximum distance between them. Best choose between 15 and 30 (e.g. NEAR(recruit, professionals, 20)).
Finds documents with the search term in word versions or composites. The asterisk * marks whether you wish them BEFORE, BEHIND, or BEFORE and BEHIND the search term (e.g. lightweight*, *lightweight, *lightweight*).
Finds documents with the search term in different spellings. "?" allows only one character (e.g. organi?ation).
Special characters are understood as AND (e.g. Miller Bros. & Sons).

Semantic Search

powered by (Link opens in a new window)
loading …
Log in
Top

5. Taktik, Tools und Vorgehen der Angreifer

  • 2023
  • OriginalPaper
  • Chapter
Published in:
Authors
Florian Oelmaier
Uwe Knebelsberger
Arthur Naefe
Published in
Krisenfall Ransomware
Publisher
Springer Fachmedien Wiesbaden

Activate our intelligent search to find suitable subject content or patents.

search-config
loading …

Zusammenfassung

Ein Ransomware-Angriff läuft typischerweise in mehreren Phasen ab. Nach einem erfolgreichen Initial Access haben die Angreifer die Kontrolle über ein Computersystem. Mittels einer Local Privilege Escalation verschaffen sich die Täter erhöhte Rechte auf dem System und persistieren ihren Zugriff mit einem Remote Access Trojaner. Von dort aus bewegen sich die Angreifer durchs interne Netz (Lateral Movement) und suchen eine Möglichkeit die höchsten Rechte in der IT-Infrastruktur zu erbeuten (Global Privilege Escalation). Für die spätere Double Extortion werden während dem Angriffsvorgehen schon sensible Daten ausgeleitet (Data Exfiltration). Wenn die Angreifer erfolgreich die zentrale IT-Infrastruktur übernommen haben, beginnt das Endspiel. Sie löschen Backups (Attacking the Backup) und verschlüsseln so viele Daten wie möglich (Encryption).

Already a customer? Then log in here to gain access.

Customer login

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Business + Economics & Engineering + Technology"

Online-Abonnement

Springer Professional "Business + Economics & Engineering + Technology" gives you access to:

  • more than 130.000 books
  • more than 540 journals

from the following subject areas:

  • Automotive
  • Construction + Real Estate
  • Business IT + Informatics
  • Electrical Engineering + Electronics
  • Energy + Sustainability
  • Finance + Banking
  • Management + Leadership
  • Marketing + Sales
  • Mechanical Engineering + Materials
  • Surfaces + Materials Technology
  • Insurance + Risk


Secure your knowledge advantage now!

inform now

Springer Professional "Engineering + Technology"

Online-Abonnement

Springer Professional "Engineering + Technology" gives you access to:

  • more than 75.000 books
  • more than 390 journals

from the following specialised fileds:

  • Automotive
  • Business IT + Informatics
  • Construction + Real Estate
  • Electrical Engineering + Electronics
  • Energy + Sustainability
  • Mechanical Engineering + Materials
  • Surfaces + Materials Technology





 

Secure your knowledge advantage now!

inform now

Springer Professional "Business + Economics"

Online-Abonnement

Springer Professional "Business + Economics" gives you access to:

  • more than 100.000 books
  • more than 340 journals

from the following specialised fileds:

  • Construction + Real Estate
  • Business IT + Informatics
  • Finance + Banking
  • Management + Leadership
  • Marketing + Sales
  • Insurance + Risk



Secure your knowledge advantage now!

inform now

For explorers: Get to know our platforms better with a free registration.

Register for free
previous chapter Die Täter und ihre Motivation
next chapter Erst- und Sofortmaßnahmen
Title
Taktik, Tools und Vorgehen der Angreifer
Authors
Florian Oelmaier
Uwe Knebelsberger
Arthur Naefe
Copyright Year
2023
Book
Krisenfall Ransomware

Print ISBN: 978-3-658-41613-3

Electronic ISBN: 978-3-658-41614-0

Copyright Year: 2023

DOI
https://doi.org/10.1007/978-3-658-41614-0_5
This content is only visible if you are logged in and have the appropriate permissions.

Premium Partner

    Image Credits
    Neuer Inhalt/© ITandMEDIA, Nagarro GmbH/© Nagarro GmbH, AvePoint Deutschland GmbH/© AvePoint Deutschland GmbH, AFB Gemeinnützige GmbH/© AFB Gemeinnützige GmbH, USU GmbH/© USU GmbH, Ferrari electronic AG/© Ferrari electronic AG