Ransomware Knight: the digital threat affecting Italy

According to Proofpoint researchers, Knight ransomware is targeting Italy, using an attack technique first identified in 2021. This dangerous ransomware takes corporate data hostage and demands a ransom in Bitcoin. It is essential to protect yourself from this threat.

Ransomware distribution methods

Although rare, Knight ransomware can arrive directly via email. However, cyber gangs prefer to collaborate with initial access brokers to distribute malware massively. The goal is to sell access to compromised systems. The human factor continues to be weak in the cybersecurity chain, making users an easy target for cybercriminals.

The growing risk for Italian companies

According to Swascan's Threatland Q2 report, in the second quarter of 2023, ransomware cases increased by 105% globally and by 34.6% in Italy. SMBs are particularly vulnerable, with 80% of recorded attacks affecting them. The tactics and techniques used by cybercriminals remain constant over time, but it is possible to protect and defend yourself from these threats.

How to protect yourself from Knight ransomware

To effectively protect yourself from Knight ransomware, it is crucial to pay attention to the sender's email, especially if it contains links or attachments. If in doubt, avoid clicking on links and opening attached documents. User training and awareness are key to recognizing and preventing phishing attacks. It is also advisable to use threat intelligence activities and implement telemetry systems associated with a SOC to intercept and block threats.