Recently, a shocking incident occurred that resulted in the disruption of immigration services and various other public services. The disruption stemmed from a cyberattack carried out by Brain Cipher Ransomware.

The&nbsp;Pusat Data Nasional (PDN)&nbsp;was the main target of this attack since June 20. The cyberattack has crippled essential services like immigration services, leading to another impact on 210 instantiations. Although some services have been restored, the impact is still felt.

The&nbsp;Badan Siber dan Sandi Negara (BSSN)&nbsp;and related institutions immediately responded to this incident. Emergency measures were taken by sending an assistance team to the data center in Surabaya. The PDNS was built as an alternative because the main&nbsp;Pusat Data Nasional (PDN)&nbsp;is not yet completed.

The responsible party for this attack demanded a ransom of USD 8 million (approximately Rp 131 billion) to restore access to the system.

For context, PDN is managed by Telkom Group through Telkom Sigma. Telkom Indonesia’s Network &amp; IT Solution Director, Herlan Wijanarko, confirmed the ransom demand. However, the compensation process is still under evaluation.

In parallel with the recent events, the Brain Cipher Ransomware is an emerging threat actor currently focusing on organizational targets. The following analysis details the methods, indicators of compromise (IOCs), and tactics used by this ransomware group.

Brain Cipher Ransomware is delivered primarily through phishing campaigns. These campaigns often use deceptive emails to trick recipients into downloading and executing malicious files.

SHA1: 935c0b39837319fda571aa800b67d997b79c3198

- SHA256: eb82946fa0de261e92f8f60aa878c9fef9ebb34fdababa66995403b110118b12

- SSDEEP: 3072/5qUpfDT6zT73Ew8Ym9wV9JyknP7SAy

- IP Addresses: 199.232.214.172 (US), 224.0.0.252

- Web: http://mybmtbgd7aprdnw2ekxht5qap5daam2wch25coqerrq2zdioanob34ad.onion

- VirusTotal:<a href="https://www.virustotal.com/gui/file/eb82946fa0de261e92f8f60aa878c9fef9ebb34fdababa66995403b110118b12">VirusTotal Link</a>

- T1204.002: User Execution Malicious File

- T1555.003: Credentials from Web Browsers

The Brain Cipher Ransomware employs sophisticated techniques to infiltrate, propagate, and encrypt data within targeted networks. Its primary delivery method is through phishing emails, which often contain malicious attachments or links leading to malware downloads.

Once inside a network, the ransomware utilizes various tactics to escalate privileges, evade defenses, and gain access to sensitive information. For instance, it uses Windows Command Shell for execution and bypasses user account control for privilege escalation.

The ransomware's discovery tactics include querying the registry, discovering system information, and software discovery. These actions allow the ransomware to map out the infected environment and identify high-value targets for encryption.

Credential access is a significant aspect of Brain Cipher's methodology. It steals web session cookies, credentials from web browsers, and credentials stored in files, providing the attackers with the necessary information to further infiltrate the network or exfiltrate data.

Finally, the ransomware's impact tactic is data encryption, which renders the victim's data inaccessible until a ransom is paid. This tactic is effective in causing significant disruption to organizational operations, as seen in the recent attack on Indonesia's National Data Center.

To mitigate the threat posed by Brain Cipher Ransomware and similar attacks, organizations should adopt a multi-layered security approach. This includes:

- Email Security: Implementing robust email security solutions to detect and block phishing attempts.

- User Training: Regularly training employees to recognize and report phishing emails.

- Endpoint Security: Deploying advanced endpoint protection to detect and prevent malware execution.

- Network Segmentation: Segregating critical systems and data to limit the spread of ransomware.

- Backup Solutions: Maintaining regular backups of critical data and ensuring that backups are stored securely and offline.

- Incident Response Planning: Developing and regularly updating incident response plans to ensure a swift and effective response to ransomware attacks.

Enhancing Your Cybersecurity with Peris.ai

As cyber threats continue to evolve, it becomes increasingly important for organizations to stay ahead of potential attacks. Peris.ai offers advanced cybersecurity solutions designed to anticipate and defend against such threats. One such measure is&nbsp;<a href="https://www.peris.ai/product-services/ganesha/phisland">Peris.ai's Phisland</a>, a sophisticated phishing simulator designed to safeguard your digital frontier.

Phisland is a comprehensive phishing simulator that provides your organization with the tools to stay ahead of cyber threats. By simulating phishing attacks via email, websites, and WhatsApp, Phisland helps enhance your team's security awareness and overall cybersecurity posture.

Realistic Simulations: Phisland offers a suite of realistic phishing simulations that mimic real-world attacks. By tracking user interactions with these simulations, Phisland enables organizations to identify vulnerabilities and opportunities for improvement in real-time.

Enhance Security Awareness: Phisland stands out with its ability to analyze and interpret user responses intelligently. Through advanced algorithms and customizable analytics, Phisland distils vast amounts of data into actionable intelligence, helping organizations create targeted and effective strategies to enhance their security awareness and resilience against cyber threats.

Embrace Phisland to proactively strengthen your cybersecurity measures and protect your organization from potential phishing attacks.

The recent ransomware attack on Indonesia's National Data Center underscores the escalating threat of ransomware and the profound impact such incidents can have on public services. The emergence of threats like Brain Cipher Ransomware further emphasizes the necessity for robust cybersecurity measures to guard against evolving cyber threats.

Organizations must remain vigilant, continually updating their security practices and staying informed about the latest threat intelligence to effectively combat ransomware attacks.

For comprehensive solutions to enhance your cybersecurity posture and protect against these threats, visit&nbsp;<a href="https://www.peris.ai/">Peris.ai Cybersecurity</a>. Explore our wide range of products and services designed to keep your organization secure in an ever-changing digital landscape. Don't wait—safeguard your digital assets with Peris.ai today!

Peris.ai, a group of practitioners with professional experience in cybersecurity, revealed in more detail about the Cipher Brain ransomware that has attacked the Temporary National Data Center since last June 20. <img style="width: 100%;" src="https://imagedelivery.net/H6_s_Eb_ylTWnSEV3HlmYQ/d85ec879-771a-45dc-6967-256db8309100/public" alt="Image" />Recently, a shocking incident occurred that resulted in the disruption of immigration services and various other public services. The disruption stemmed from a cyberattack carried out by Brain Cipher Ransomware.The&nbsp;Pusat Data Nasional (PDN)&nbsp;was the main target of this attack since June 20. The cyberattack has crippled essential services like immigration services, leading to another impact on 210 instantiations. Although some services have been restored, the impact is still felt.The&nbsp;Badan Siber dan Sandi Negara (BSSN)&nbsp;and related institutions immediately responded to this incident. Emergency measures were taken by sending an assistance team to the data center in Surabaya. The PDNS was built as an alternative because the main&nbsp;Pusat Data Nasional (PDN)&nbsp;is not yet completed.The responsible party for this attack demanded a ransom of USD 8 million (approximately Rp 131 billion) to restore access to the system.For context, PDN is managed by Telkom Group through Telkom Sigma. Telkom Indonesia’s Network &amp; IT Solution Director, Herlan Wijanarko, confirmed the ransom demand. However, the compensation process is still under evaluation.<h2>Brain Cipher Ransomware: An Overview</h2><img style="width: 100%;" src="https://imagedelivery.net/H6_s_Eb_ylTWnSEV3HlmYQ/3a827b1b-c7e0-4f6c-c3b5-10875c2c1a00/public" alt="Image" />In parallel with the recent events, the Brain Cipher Ransomware is an emerging threat actor currently focusing on organizational targets. The following analysis details the methods, indicators of compromise (IOCs), and tactics used by this ransomware group.<h3>Method of Delivery: Phishing</h3>Brain Cipher Ransomware is delivered primarily through phishing campaigns. These campaigns often use deceptive emails to trick recipients into downloading and executing malicious files.<h3>Indicators of Compromise (IOCs)</h3>- MD5: 448f1796fe8de02194b21c0715e0a5f6SHA1: 935c0b39837319fda571aa800b67d997b79c3198- SHA256: eb82946fa0de261e92f8f60aa878c9fef9ebb34fdababa66995403b110118b12- SSDEEP: 3072/5qUpfDT6zT73Ew8Ym9wV9JyknP7SAy- IP Addresses: 199.232.214.172 (US), 224.0.0.252- Web: http://mybmtbgd7aprdnw2ekxht5qap5daam2wch25coqerrq2zdioanob34ad.onion- Email: brain.support@cyberfear.com- VirusTotal:<a href="https://www.virustotal.com/gui/file/eb82946fa0de261e92f8f60aa878c9fef9ebb34fdababa66995403b110118b12">VirusTotal Link</a><h3>MITRE ATT&amp;CK&nbsp;</h3><img style="width: 100%;" src="https://imagedelivery.net/H6_s_Eb_ylTWnSEV3HlmYQ/c8aabfb4-658a-4693-ab70-24c72fede100/public" alt="Image" /><h4>Execution</h4>- T1059.003: Windows Command Shell- T1204.002: User Execution Malicious File<h4>Privilege Escalation</h4>- T1548.002: Bypass User Account Control<h4>Defense Evasion</h4>- T1548.002: Bypass User Account Control<h4>Credential Access</h4>- T1539: Steal Web Session Cookies- T1555.003: Credentials from Web Browsers- T1552.001: Credentials in Files<h4>Discovery</h4>- T1012: Query Registry- T1082: System Information Discovery- T1518: Software Discovery<h4>Impact</h4>- T1486: Data Encryption for Impact<h3>Detailed Analysis</h3>The Brain Cipher Ransomware employs sophisticated techniques to infiltrate, propagate, and encrypt data within targeted networks. Its primary delivery method is through phishing emails, which often contain malicious attachments or links leading to malware downloads.Once inside a network, the ransomware utilizes various tactics to escalate privileges, evade defenses, and gain access to sensitive information. For instance, it uses Windows Command Shell for execution and bypasses user account control for privilege escalation.The ransomware's discovery tactics include querying the registry, discovering system information, and software discovery. These actions allow the ransomware to map out the infected environment and identify high-value targets for encryption.Credential access is a significant aspect of Brain Cipher's methodology. It steals web session cookies, credentials from web browsers, and credentials stored in files, providing the attackers with the necessary information to further infiltrate the network or exfiltrate data.Finally, the ransomware's impact tactic is data encryption, which renders the victim's data inaccessible until a ransom is paid. This tactic is effective in causing significant disruption to organizational operations, as seen in the recent attack on Indonesia's National Data Center.<h3>Mitigation and Response</h3>To mitigate the threat posed by Brain Cipher Ransomware and similar attacks, organizations should adopt a multi-layered security approach. This includes:- Email Security: Implementing robust email security solutions to detect and block phishing attempts.- User Training: Regularly training employees to recognize and report phishing emails.- Endpoint Security: Deploying advanced endpoint protection to detect and prevent malware execution.- Network Segmentation: Segregating critical systems and data to limit the spread of ransomware.- Backup Solutions: Maintaining regular backups of critical data and ensuring that backups are stored securely and offline.- Incident Response Planning: Developing and regularly updating incident response plans to ensure a swift and effective response to ransomware attacks.<h3>Enhancing Your Cybersecurity with Peris.ai</h3>As cyber threats continue to evolve, it becomes increasingly important for organizations to stay ahead of potential attacks. Peris.ai offers advanced cybersecurity solutions designed to anticipate and defend against such threats. One such measure is&nbsp;<a href="https://www.peris.ai/product-services/ganesha/phisland">Peris.ai's Phisland</a>, a sophisticated phishing simulator designed to safeguard your digital frontier.<h4>What is Ganesha - Phisland?</h4>Phisland is a comprehensive phishing simulator that provides your organization with the tools to stay ahead of cyber threats. By simulating phishing attacks via email, websites, and WhatsApp, Phisland helps enhance your team's security awareness and overall cybersecurity posture.<img style="width: 100%;" src="https://imagedelivery.net/H6_s_Eb_ylTWnSEV3HlmYQ/b75c142d-04ba-4a39-58bd-b66b60ff5d00/public" alt="Image" /><h4>How does it work?</h4>Realistic Simulations: Phisland offers a suite of realistic phishing simulations that mimic real-world attacks. By tracking user interactions with these simulations, Phisland enables organizations to identify vulnerabilities and opportunities for improvement in real-time.Enhance Security Awareness: Phisland stands out with its ability to analyze and interpret user responses intelligently. Through advanced algorithms and customizable analytics, Phisland distils vast amounts of data into actionable intelligence, helping organizations create targeted and effective strategies to enhance their security awareness and resilience against cyber threats.Embrace Phisland to proactively strengthen your cybersecurity measures and protect your organization from potential phishing attacks.<h3>Conclusion</h3>The recent ransomware attack on Indonesia's National Data Center underscores the escalating threat of ransomware and the profound impact such incidents can have on public services. The emergence of threats like Brain Cipher Ransomware further emphasizes the necessity for robust cybersecurity measures to guard against evolving cyber threats.Organizations must remain vigilant, continually updating their security practices and staying informed about the latest threat intelligence to effectively combat ransomware attacks.For comprehensive solutions to enhance your cybersecurity posture and protect against these threats, visit&nbsp;<a href="https://www.peris.ai/">Peris.ai Cybersecurity</a>. Explore our wide range of products and services designed to keep your organization secure in an ever-changing digital landscape. Don't wait—safeguard your digital assets with Peris.ai today!

Internet service

Network / Network Equipment

System / Website / Application development

Peris.ai, a group of practitioners with professional experience in cybersecurity, revealed in more detail about the Cipher Brain ransomware that has attacked the Temporary National Data Center since last June 20.

Peris.ai Analysis: Brain Cipher Ransomware Attack on Indonesia’s National Data Center

Embrace Continuous Integration and Delivery:

One of the fundamental pillars of successful DevOps implementation is embracing continuous integration (CI) and continuous delivery (CD). By automating the build, test, and deployment processes, CI/CD enables developers to deliver high-quality code at a rapid pace, ensuring shorter release cycles and minimizing the chances of manual errors. We’ll explore the key principles and tools that facilitate CI/CD and highlight the benefits they bring to your software development lifecycle.

Automation lies at the core of DevOps practices. From infrastructure provisioning to code testing and deployment, automating repetitive and error-prone tasks is essential for achieving efficiency and consistency. We’ll discuss the various automation tools and frameworks available, along with best practices for implementing automation effectively within your DevOps workflows.

Foster Collaboration and Communication:

DevOps is not just about technology; it’s also about fostering a culture of collaboration and communication across teams. Effective communication and collaboration are vital for breaking down silos, aligning goals, and ensuring a smooth flow of information throughout the development and operations teams. We’ll explore techniques, tools, and strategies to enhance collaboration and communication within your DevOps ecosystem.

Implement Infrastructure as Code (IaC):

Infrastructure as Code (IaC) is a powerful concept that allows you to define and manage infrastructure using code, enabling infrastructure provisioning, configuration, and maintenance through automation. We’ll delve into the benefits of IaC, popular tools such as Terraform and Ansible, and provide insights on how to leverage IaC effectively to achieve scalability, consistency, and version control in your infrastructure.

Embrace Cloud-Native Technologies:

Cloud-native technologies play a pivotal role in modern DevOps practices. By leveraging containers, orchestration frameworks, and serverless architectures, organizations can achieve scalability, resilience, and agility in their software deployments. We’ll explore popular cloud-native technologies like Kubernetes, Docker, and AWS Lambda, and discuss how to harness their capabilities to optimize your DevOps workflows.

Prioritize Security and Compliance:

Security and compliance should be integral components of any DevOps strategy. Implementing security measures and adhering to compliance regulations from the early stages of development can help prevent vulnerabilities and mitigate risks. We’ll provide actionable insights on integrating security practices into your DevOps pipelines, conducting vulnerability assessments, and ensuring compliance with industry standards.

Continuous monitoring and performance measurement are critical for identifying bottlenecks, detecting issues, and optimizing your DevOps processes. We’ll discuss essential monitoring tools, techniques for gathering actionable metrics, and strategies to improve application performance, ensuring your software is running at its optimal state throughout its lifecycle.

DevOps is an iterative process, and continuous improvement is key to its success. We’ll explore methodologies like Agile and Lean, and how they can be integrated into your DevOps practices. By fostering a culture of learning and experimentation, you can continually enhance your workflows, address pain points, and deliver better software products

<h1>10 Essential DevOps Best Practices for Streamlined Business</h1>DevOps has revolutionized the way software development and deployment are carried out, empowering organizations to achieve faster release cycles, enhanced collaboration, and increased operational efficiency. However, to truly harness the power of DevOps, it’s crucial to follow proven best practices that streamline the entire process. In this comprehensive guide, we’ll delve into the top 10 essential DevOps best practices that will equip you with the knowledge and strategies to optimize your software development and deployment workflows.Embrace Continuous Integration and Delivery:One of the fundamental pillars of successful DevOps implementation is embracing continuous integration (CI) and continuous delivery (CD). By automating the build, test, and deployment processes, CI/CD enables developers to deliver high-quality code at a rapid pace, ensuring shorter release cycles and minimizing the chances of manual errors. We’ll explore the key principles and tools that facilitate CI/CD and highlight the benefits they bring to your software development lifecycle.Automate Everything Possible:Automation lies at the core of DevOps practices. From infrastructure provisioning to code testing and deployment, automating repetitive and error-prone tasks is essential for achieving efficiency and consistency. We’ll discuss the various automation tools and frameworks available, along with best practices for implementing automation effectively within your DevOps workflows.Foster Collaboration and Communication:DevOps is not just about technology; it’s also about fostering a culture of collaboration and communication across teams. Effective communication and collaboration are vital for breaking down silos, aligning goals, and ensuring a smooth flow of information throughout the development and operations teams. We’ll explore techniques, tools, and strategies to enhance collaboration and communication within your DevOps ecosystem.Implement Infrastructure as Code (IaC):Infrastructure as Code (IaC) is a powerful concept that allows you to define and manage infrastructure using code, enabling infrastructure provisioning, configuration, and maintenance through automation. We’ll delve into the benefits of IaC, popular tools such as Terraform and Ansible, and provide insights on how to leverage IaC effectively to achieve scalability, consistency, and version control in your infrastructure.Embrace Cloud-Native Technologies:Cloud-native technologies play a pivotal role in modern DevOps practices. By leveraging containers, orchestration frameworks, and serverless architectures, organizations can achieve scalability, resilience, and agility in their software deployments. We’ll explore popular cloud-native technologies like Kubernetes, Docker, and AWS Lambda, and discuss how to harness their capabilities to optimize your DevOps workflows.Prioritize Security and Compliance:Security and compliance should be integral components of any DevOps strategy. Implementing security measures and adhering to compliance regulations from the early stages of development can help prevent vulnerabilities and mitigate risks. We’ll provide actionable insights on integrating security practices into your DevOps pipelines, conducting vulnerability assessments, and ensuring compliance with industry standards.Embrace Continuous Integration and Delivery:One of the fundamental pillars of successful DevOps implementation is embracing continuous integration (CI) and continuous delivery (CD). By automating the build, test, and deployment processes, CI/CD enables developers to deliver high-quality code at a rapid pace, ensuring shorter release cycles and minimizing the chances of manual errors. We’ll explore the key principles and tools that facilitate CI/CD and highlight the benefits they bring to your software development lifecycle.Automate Everything Possible:Automation lies at the core of DevOps practices. From infrastructure provisioning to code testing and deployment, automating repetitive and error-prone tasks is essential for achieving efficiency and consistency. We’ll discuss the various automation tools and frameworks available, along with best practices for implementing automation effectively within your DevOps workflows.DevOps is not just about technology; it’s also about fostering a culture of collaboration and communication across teams. Effective communication and collaboration are vital for breaking down silos, aligning goals, and ensuring a smooth flow of information throughout the development and operations teams. We’ll explore techniques, tools, and strategies to enhance collaboration and communication within your DevOps ecosystem.Implement Infrastructure as Code (IaC):Infrastructure as Code (IaC) is a powerful concept that allows you to define and manage infrastructure using code, enabling infrastructure provisioning, configuration, and maintenance through automation. We’ll delve into the benefits of IaC, popular tools such as Terraform and Ansible, and provide insights on how to leverage IaC effectively to achieve scalability, consistency, and version control in your infrastructure.Embrace Cloud-Native Technologies:Cloud-native technologies play a pivotal role in modern DevOps practices. By leveraging containers, orchestration frameworks, and serverless architectures, organizations can achieve scalability, resilience, and agility in their software deployments. We’ll explore popular cloud-native technologies like Kubernetes, Docker, and AWS Lambda, and discuss how to harness their capabilities to optimize your DevOps workflows.Prioritize Security and Compliance:Security and compliance should be integral components of any DevOps strategy. Implementing security measures and adhering to compliance regulations from the early stages of development can help prevent vulnerabilities and mitigate risks. We’ll provide actionable insights on integrating security practices into your DevOps pipelines, conducting vulnerability assessments, and ensuring compliance with industry standards.Monitor and Measure Performance:Continuous monitoring and performance measurement are critical for identifying bottlenecks, detecting issues, and optimizing your DevOps processes. We’ll discuss essential monitoring tools, techniques for gathering actionable metrics, and strategies to improve application performance, ensuring your software is running at its optimal state throughout its lifecycle.Iterate and Improve Continuously:DevOps is an iterative process, and continuous improvement is key to its success. We’ll explore methodologies like Agile and Lean, and how they can be integrated into your DevOps practices. By fostering a culture of learning and experimentation, you can continually enhance your workflows, address pain points, and deliver better software productsContinuous monitoring and performance measurement are critical for identifying bottlenecks, detecting issues, and optimizing your DevOps processes. We’ll discuss essential monitoring tools, techniques for gathering actionable metrics, and strategies to improve application performance, ensuring your software is running at its optimal state throughout its lifecycle.Iterate and Improve Continuously:DevOps is an iterative process, and continuous improvement is key to its success. We’ll explore methodologies like Agile and Lean, and how they can be integrated into your DevOps practices. By fostering a culture of learning and experimentation, you can continually enhance your workflows, address pain points, and deliver better software productsWe are a highly productive and skilled team of IT professionals with expertise in Cloud solutions, DevOps, software development and all other IT services.Tekrella IT solutions
Contact : info@tekrella.com
Call : +91 9361127915

Mobile app

DevOps has revolutionized the way software development and deployment are carried out, empowering organizations to achieve faster release cycles, enhanced collaboration, and increased operational efficiency. However, to truly harness the power of DevOps, it’s crucial to follow proven best practices that streamline the entire process. In this comprehensive guide, we’ll delve into the top 10 essential DevOps best practices that will equip you with the knowledge and strategies to optimize your software development and deployment workflows.