This episode of the Juniper Threat Labs attack demo series is about the Rhysida Ransomware, how it has infected several organizations and how the ransomware infection works. Following the demo, Juniper shows how its Juniper Connected Security customers with an SRX and Juniper ATP are already protected from this threat.
For more information about Juniper Threat Labs, visit: https://threatlabs.juniper.net/home/#/
00:00:19 Discovery of Rhysida Ransomware
00:00:30 Infected Organisations
00:01:22 Rhysida double-extension tactic
00:02:33 CISA advisory about Rhysida
00:03:40 Rhysida Ransomware infection demo
00:05:38 Attempting the attack with a Juniper SRX NGFW present
00:06:59 Threat Prevention Policy
00:08:12 SRX with ATP successfully blocking Rhysida ransomware
