Insider Threat: Understanding the Risks of Cyber Extortion from Within
This article details an incident where a former core infrastructure engineer attempted to extort an industrial firm by deleting admin accounts, resetting hundreds of passwords, and demanding 20 bitcoin to spare the company's servers. The incident highlights the dangers of insider threats and the importance of robust security measures to prevent and detect such attacks. The engineer was caught and sentenced to prison, but the incident serves as a reminder of the potential damage that insiders can cause. Effective security requires a defense-in-depth approach that includes monitoring for unusual activity and implementing strict access controls.