Hive Ransomware

HHS Cybersecurity Program

By: Office of Information Security

Narrated by: Tom Brooks

General efforts to help prevent ransomware attacks include:

• Maintain offline, encrypted backups of data and regularly test your backups.
• Create, maintain, and exercise a basic cyber incident response plan, resiliency plan, and associated communications plan.
• Mitigate internet-facing vulnerabilities and misconfigurations.
• Reduce the risk of phishing emails from reaching end users.
• Practice good cyber hygiene.

Specific mitigations/detections for Hive Ransomware

• Remove applications not deemed necessary for day-to-day operations.
• Abnormal termination of the BMR, SQL, Oracle, Postgres, Redis, VSS, Backup, and SST services.
• Abnormal termination of the MS pub and MS Desktop processes.
• Log monitoring

PLEASE NOTE: When you purchase this title, the accompanying PDF will be available in your Audible Library along with the audio.

©2021 Tom Brooks (P)2021 Tom Brooks