Article by, Oakley Cox, Director of Analysis, Darktrace
Ransomware has taken the world by storm, and IT is not the only technology affected. Operational Technology (OT), which is increasingly blending with IT, is also susceptible to ransomware tactics, techniques, and procedures (TTPs). And when ransomware strikes OT, the effects have the potential to be devastating.
Here, we will look at a ransomware attack that spread from IT to OT systems. The attack was detected by Darktrace AI.
This threat find demonstrates a use case of Darktrace’s technology that delivers immense value to organizations with OT: spotting and stopping ransomware at its earliest stages, before the damage is done. This is particularly helpful for organizations with interconnected enterprise and industrial environments, as it means:
- Emerging attacks can be contained in IT before they spread laterally into OT, and even before they spread from device to device in IT;
- Organizations gain granular visibility into their industrial environments, detecting deviations from normal activity, and quick identification of remediating actions.