Information Security Incident RESEARCH SCENARIO

 

 

Order Number			45471455714
Type of Paper			Essay
Writer Classification Level			Undergraduate
Style of Writing			MLA/APA/CHICAGO/
Sources and References			5
Number of Pages			4
Paper Instructions RESEARCH SCENARIO ABC Services Ltd (‘ABC’) is a global financial services provider. To comply with local regulatory frameworks, they operate offices around the world, most of which have a legal requirement to store their Know Your Customer (‘KYC’) information in on-site servers. One of these servers, located in Lebanon, was recently infected with a variation of malware called ransomware, which has prevented ABC from accessing their local KYC data by encrypting it with a secret key. The threat actor behind the attack left behind a file on the server that demands a ransom for the return/decryption of this data. Once they became aware of this incident, they instructed their local IT team to bring the server offline to mitigate the risk of the malware spreading across their network. They also activated their business continuity plans to minimize disruption to their core business, which involved recreating the servers from backups taken over a month ago. ABC approached YOU  to help them answer several questions, specifically:  What type of ransomware was used?  How is the ransomware typically delivered?  What is the likely profile of the original developers of the ransomware?  What is the likely profile of a threat actor using this ransomware?  Are there any known methods of decrypting the data encrypted by the ransomware?  What is the likelihood that the ransomware has exfiltrated data?  What additional information would you require to investigate whether the threat actor has exfiltrated KYC data? They have provided you with a sample of the ransomware and asked you to carry out a preliminary investigation. The sample they provided contains the following key information:  Info.exe  (the ‘executable’) – this is the file name of the ransomware that was used to encrypt ABC’s data.  2help2@cock.li and desher@cock.li – these email addresses are provided in the ransom note left as a text file on the client’s systems, as a means of contacting the threat actor.  .no_more_ransom – this file name suffix is present on files encrypted by the ransomware that affected your systems and data. Your Task Please research and prepare a written summary of findings to answer ABC’s questions in an MS Word report.  While you will certainly have to make assumptions about the situation, we will expect you to be able to explain and answer above questions at a high level about some of the key technical concepts involved in your findings. Examples of topics you may consider including in the report are: RDP, asymmetric encryption, brute forcing, and phishing. Please be sure to capture the key findings from your research into the malware as well as the potential implications of this incident for ABC.
	Distinguished (100%)	Proficient (85%)		Basic (70%)	Below Expectations (50%)	Non-Performance (0%)
Thesis Statement	Raises the strongest   objection to the thesis presented in the assignment. The objection is strongly grounded in research and logical reasoning.	Raises a plausible objection to the thesis presented in the assignment. The objection is mostly grounded in research and logical reasoning.		Raises an objection to the thesis presented in the assignment. The objection is somewhat grounded in research and logical reasoning.	Attempts to raise an objection to the thesis presented in the assignment. The objection is minimally grounded in research and logical reasoning.	The objection to the thesis is either nonexistent or lacks the components described in the assignment instructions.
Counter Argument	Provides a strong, thorough rebuttal to the objection. The rebuttal effectively demonstrates that the thesis can withstand the objection and applies the principles of charity and accuracy.	Provides a rebuttal to the objection. The rebuttal mostly demonstrates that the thesis can withstand the objection and mostly applies the principles of charity and accuracy.		Provides a limited rebuttal to the objection. The rebuttal somewhat demonstrates that the thesis can withstand the objection and somewhat applies the principles of charity and accuracy.	Attempts to provide a rebuttal to the objection; however, the rebuttal minimally demonstrates that the thesis can withstand the objection and does not apply the principles of charity and accuracy.	The rebuttal is either nonexistent or lacks the components described in the assignment instructions.
Conclusion	Provides clear and concise closing remarks that comprehensively summarize the essay. The remarks consider the broader controversy and/or further research that could offer additional insight into the moral solution of the business problem.	Provides closing remarks that summarize the essay. The remarks mostly consider the broader controversy and/or further research that could offer additional insight into the moral solution of the business problem. The closing remarks are somewhat unclear.		Provides closing remarks that minimally summarizes the essay. The remarks minimally consider the broader controversy and/or further research that could offer additional insight into the moral solution of the business problems. The closing remarks are unclear and/or vague.	Attempts to provide closing remarks that summarize the essay; however, the remarks do not consider the broader controversy and/or further research that could offer additional insight into the moral solution of the business problem. The closing remarks are unclear and vague.	The closing remarks are either nonexistent or lack the components described in the assignment instructions.
Written Communication: Context of and Purpose for Writing	Demonstrates methodical application of organization and presentation of content. The purpose of the writing is evident and easy to understand. Summaries, quotes, and/or paraphrases fit naturally into the sentences and paragraphs. Paper flows smoothly.	Demonstrates sufficient application of organization and presentation of content. The purpose of the writing is, for the most part, clear and easy to understand. There are some problems with the blending of summaries, paraphrases, and quotes. Paper flows somewhat smoothly.		Demonstrates a limited understanding of organization and presentation of content in written work. The purpose of the writing is somewhat evident but may not be integrated throughout the assignment. There are many problems with the blending of summaries, paraphrases, and quotes. Paper does not flow smoothly in all sections.	Organization and presentation of content are extremely limited. The purpose of the writing is unclear. There is little or no blending of summaries, paraphrases, and quotes. Paper does not flow smoothly when read.	The assignment is either nonexistent or lacks the components described in the instructions.
Written Communication: Control of Syntax and Mechanics	– Displays meticulous comprehension and organization of syntax and mechanics, such as spelling and grammar. Written work contains no errors and is very easy to understand.	Displays comprehension and organization of syntax and mechanics, such as spelling and grammar. Written work contains only a few minor errors and is mostly easy to understand		Displays basic comprehension of syntax and mechanics, such as spelling and grammar. Written work contains a few errors which may slightly distract the reader.	Fails to display basic comprehension of syntax or mechanics, such as spelling and grammar. Written work contains major errors which distract the reader.	The assignment is either nonexistent or lacks the components described in the instructions.
Written Communication: Required Formatting	Accurately uses required formatting consistently throughout the paper, title page, and reference page.	Exhibits required formatting throughout the paper. However, layout contains a few minor errors.		Exhibits limited knowledge of required formatting throughout the paper. However, layout does not meet all requirements.	Fails to exhibit basic knowledge of required formatting. There are frequent errors, making the layout difficult to distinguish as required style.	The assignment is either nonexistent or lacks the components described in the instructions.
Written Communication: Word Requirement	The length of the paper is equivalent to the required number of words.	The length of the paper is nearly equivalent to the required number of words.		The length of the paper is equivalent to at least three quarters of the required number of words.	The length of the paper is equivalent to at least one half of the required number of words.	The assignment is either nonexistent or lacks the components described in the instructions.
Written Communication: Resource Requirement	Uses more than the required number of scholarly sources, providing compelling evidence to support ideas. All sources on the reference page are used and cited correctly within the body of the assignment.	Uses the required number of scholarly sources to support ideas. All sources on the reference page are used and cited correctly within the body of the assignment.		Uses less than the required number of sources to support ideas. Some sources may not be scholarly. Most sources on the reference page are used within the body of the assignment. Citations may not be formatted correctly.	Uses an inadequate number of sources that provide little or no support for ideas. Sources used may not be scholarly. Most sources on the reference page are not used within the body of the assignment. Citations are not formatted correctly.	The assignment is either nonexistent or lacks the components described in the instructions.