Homie, I work in IT. I graduated from college with a degree in network security. So please consider that experience as your read my response.
This is a problem caused by companies putting in the minimum of effort to secure their systems and no effort to have a valid server back up strategy.
I’ll try and keep things high level since I don’t know if you’re in the field or not but you sound like you aren’t. In short, a driver (something low level used for an operating system to interact with a piece of hardware usually) got released which was full of bunk data. That caused a blue screen of death. This is a fixable situation you need to reboot your computer into a mode called “safe mode” and delete the bunk driver.
That’s not the problem though, the problem is when you use another piece of security software called bitlocker to enceypt your enterprise equipment AND servers. You can’t reboot into safe mode without a decryption key which most companies store on a piece of server software (called active directory) on a server … which is also using both crowdstrike and bitlocker.
Your data is inaccessible and the best option is to restore from a backup which as we’re seeing, few people have.
This isn’t a cyber attack. This is human incompetence and business greed.
Oh, trust me, I know. I was the network administrator for a small, not for profit, and so dealt with Windows Active Directory domains and configurations. But I might have had decently good colleagues, because in most cases, they were able to solve their own issues and would only come to me when the obvious things did not work.
Gotcha gotcha, I’ve had to go from zero to hero more times than I can count. It was a mandate at the start ups where I was the sole DevOps guy. It’s been a boon at my large well established company. I’d say I’m not a fan but first I did it I got an unexpected raise so life was good
Homie, I work in IT. I graduated from college with a degree in network security. So please consider that experience as your read my response.
This is a problem caused by companies putting in the minimum of effort to secure their systems and no effort to have a valid server back up strategy.
I’ll try and keep things high level since I don’t know if you’re in the field or not but you sound like you aren’t. In short, a driver (something low level used for an operating system to interact with a piece of hardware usually) got released which was full of bunk data. That caused a blue screen of death. This is a fixable situation you need to reboot your computer into a mode called “safe mode” and delete the bunk driver.
That’s not the problem though, the problem is when you use another piece of security software called bitlocker to enceypt your enterprise equipment AND servers. You can’t reboot into safe mode without a decryption key which most companies store on a piece of server software (called active directory) on a server … which is also using both crowdstrike and bitlocker.
Your data is inaccessible and the best option is to restore from a backup which as we’re seeing, few people have.
This isn’t a cyber attack. This is human incompetence and business greed.
Oh, trust me, I know. I was the network administrator for a small, not for profit, and so dealt with Windows Active Directory domains and configurations. But I might have had decently good colleagues, because in most cases, they were able to solve their own issues and would only come to me when the obvious things did not work.
Gotcha gotcha, I’ve had to go from zero to hero more times than I can count. It was a mandate at the start ups where I was the sole DevOps guy. It’s been a boon at my large well established company. I’d say I’m not a fan but first I did it I got an unexpected raise so life was good