Suncor downed by Cyberattack

[Xtrema]

This quote is hidden because you are ignoring this member. Show Quote

Did someone click that phishing email on their way out the pink-slip door?

Are they dumb enough to not revoke access before the talk?

[suntan]

Dumb enough to not have offsite or even cold backups so wouldn’t be surprising.

Should be a good day to go to Kor.

[Tik-Tok]

This quote is hidden because you are ignoring this member. Show Quote

Are they dumb enough to not revoke access before the talk?

People slip through the cracks when it comes to mass layoffs, it only takes one. Especially if they're in IT and know where all the flaws are, lol.

[killramos]

I would say incompetence is far more likely, especially at a place like Suncor

[Xtrema]

This quote is hidden because you are ignoring this member. Show Quote

Should be a good day to go to Kor.

Heard everyone is forced to go to the office today, no VPN/WFH.

Could be a busy day.

This quote is hidden because you are ignoring this member. Show Quote

I would say incompetence is far more likely, especially at a place like Suncor

Incompetence, red tape, legacy issues, being cheap on security.

[bjstare]

This quote is hidden because you are ignoring this member. Show Quote

Heard everyone is forced to go to the office today, no VPN/WFH.

Could be a busy day.



Incompetence, red tape, legacy issues, being cheap on security.

I have yet to encounter an O&G company that isn't cheap on security. It's crazy.

[suntan]

How they logging in wo ad?

[whoreads]

This quote is hidden because you are ignoring this member. Show Quote

Incompetence, red tape, legacy issues, being cheap on security.

Switching managed service providers at the end of every contract, ostensibly due to "issues," but going with the lowest bidder each time and compounding those issues.

[Xtrema]

This quote is hidden because you are ignoring this member. Show Quote

How they logging in wo ad?

No idea. Butts in seat, pen and paper?

This quote is hidden because you are ignoring this member. Show Quote

Switching managed service providers at the end of every contract, ostensibly due to "issues," but going with the lowest bidder each time and compounding those issues.

That too.

[killramos]

This quote is hidden because you are ignoring this member. Show Quote

I have yet to encounter an O&G company that isn't cheap on security. It's crazy.

#yoloswag

- - - Updated - - -

This quote is hidden because you are ignoring this member. Show Quote

How they logging in wo ad?

They haven’t noticed a difference versus their normal WFH productivity

[ExtraSlow]

Any organization over 100 people has extreme vulnerability just because people are some combination of lazy/untrained/incompetent. Phishing works.

Probably should have had better backup systems and less access between systems, but that's not my area of expertise. Human behaviour is almost always the weakest link in security and safety programs.

[roopi]

This quote is hidden because you are ignoring this member. Show Quote

Are they dumb enough to not revoke access before the talk?

They gave people layoff notices for later in the year (I've heard up to October).

[benyl]

This quote is hidden because you are ignoring this member. Show Quote

No idea. Butts in seat, pen and paper?

Not quite, but everything is manual.

[suntan]

Workers are digging oilsands with shovels.

[pheoxs]

This quote is hidden because you are ignoring this member. Show Quote

Dumb enough to not have offsite or even cold backups so wouldn’t be surprising.

Should be a good day to go to Kor.

It's easy to have backups but it also takes time to restore everything. Our analytics program has nearly 100 server instances to run everything.

Add to the fact that good ransomware would infect and stay dormant for a set amount of time so it’s in some of your backups and then you have to determine how far back to go.

[suntan]

You can setup AD fairly quickly. You don't need 100 goddamned server instances so your users can login. If they have VM backups it's almost trivial. I'm sure they didn't do that. Anybody that runs OSs on bare metal deserves to be shot.

You have to literally disconnect machines from the network and clean them one by one, or just isolate them into their own subnets and let them fuck each other.

[Xtrema]

This quote is hidden because you are ignoring this member. Show Quote

I'm sure they didn't do that. Anybody that runs OSs on bare metal deserves to be shot.

Oracle and IBM licensing has entered the chat.

[suntan]

This quote is hidden because you are ignoring this member. Show Quote

Oracle and IBM licensing has entered the chat.

No idea what you're trying to say.

[Darell_n]

This quote is hidden because you are ignoring this member. Show Quote

You can setup AD fairly quickly. You don't need 100 goddamned server instances so your users can login. If they have VM backups it's almost trivial. I'm sure they didn't do that. Anybody that runs OSs on bare metal deserves to be shot.

You have to literally disconnect machines from the network and clean them one by one, or just isolate them into their own subnets and let them fuck each other.

Just like Safeway / Sobeys and affiliates had to do nationwide, last year.

[bigbadboss101]

Guy I know works remotely from Ontario and he is waiting for things to get sorted out. A colleague's husband just went home as he can't do his work on the desktop.