{"id":30579,"date":"2021-12-14T16:47:45","date_gmt":"2021-12-14T13:47:45","guid":{"rendered":"https:\/\/saudishopper.com.sa\/en\/?p=30579"},"modified":"2026-03-27T23:59:18","modified_gmt":"2026-03-27T20:59:18","slug":"almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware","status":"publish","type":"post","link":"https:\/\/saudishopper.com.sa\/en\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\/","title":{"rendered":"Almost every second security event handled by Kaspersky\u2019s incident response team connected to ransomware"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>Kaspersky\u2019s Global Response Emergency Team (GERT) is called in by companies after a security breach to limit the damage and prevent an attack from spreading. This is known as incident response (IR) and is reserved for mid-size to large organizations. From January to November 2021, nearly every second security incident handled by GERT was connected to ransomware (nearly 50% of all IR requests)\u2014an increase of nearly 12 percentage points when compared to 2020.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When it comes to cybersecurity, ransomware has become the undisputed story of the year, taking down gas pipelines and government health services. Ransomware operators have refined their arsenal, focusing on fewer attacks against large-scale organizations, and an entire underground ecosystem has appeared to support ransomware gangs\u2019 efforts.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In fact, for the first 11 months in 2021, the percentage of IR requests processed by Kaspersky\u2019s GERT team was 46.7%&#8211;a jump from 37.9% for all of 2020 and 34% for 2019.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The most common targets were those in the government and industrial sector; together, attacks against those two industries compromised nearly 50% of all ransomware-related IR requests in 2021. Other popular targets included IT and financial institutions.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However, as ransomware operators have shifted to bigger ransom demands and more high-profile targets, they\u2019ve been facing increasing pressure from politicians and law enforcement agencies\u2014making efficiency of attacks critical. As a result, Kaspersky experts have note of two important trends that will gain in popularity in 2022. First, ransomware gangs are likely to construct Linux builds of ransomware to maximize their attack surface; this is something that has already been seen with groups like RansomExx and DarkSide. In addition, ransomware operators will start to focus more on \u201cfinancial blackmail\u201d. This is when operators threaten to leak critical information about companies when they are undergoing critical financial events (i.e. about to conduct a merger or acquisition, plans to go public) to undervalue their stock prices. When companies are in such a vulnerable financial state, they\u2019re more likely to pay the ransom.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>\u201cWe began talking about so-called Ransomware 2.0 in 2020, and what we\u2019ve been seeing in 2021 is this new era of ransomware coming into full force. Ransomware operators aren\u2019t just encrypting data; they\u2019re stealing it from critical, large-scale targets and threatening to expose the information if the victims doesn\u2019t pay. And Ransomware 2.0 is going anywhere in the coming year,\u201d comments Vladimir Kuskov, Head of Threat Exploration at Kaspersky.<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>\u201cAt the same time, now that ransomware is in the headlines, law enforcement agencies are working hard to bring prolific groups down\u2014which is what happened with DarkSide and REvil this year. These gangs\u2019 lifecycles are being compressed, and that means they\u2019re going to have to refine their tactics in 2022 to remain profitable, especially is some governments make paying ransoms illegal\u2014which is being discussed,\u201d adds Fedor Sinitsyn, security expert at Kaspersky.&nbsp;<\/em><em><\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Read more about the Kaspersky Security Bulletin\u2019s Story of the Year: Ransomware in the Headlines on\u00a0<a href=\"https:\/\/securelist.com\/the-story-of-the-year-ransomware-in-the-headlines\/105138\/\" target=\"_blank\" rel=\"noreferrer noopener\">Securelist<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You can also learn more about the lifecycle of high-profile ransomware gangs here.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">&nbsp;<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">To protect your business from ransomware, Kaspersky experts recommend:&nbsp;<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">\u00b7&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Do not expose remote desktop services (such as RDP) to public networks unless absolutely necessary and always use strong passwords for them.<\/h4>\n\n\n\n<h4 class=\"wp-block-heading\">\u00b7&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Promptly install available patches for commercial VPN solutions providing access for remote employees and acting as gateways in your network.<\/h4>\n\n\n\n<h4 class=\"wp-block-heading\">\u00b7&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Always keep software updated on all the devices you use to prevent ransomware from exploiting vulnerabilities.<\/h4>\n\n\n\n<h4 class=\"wp-block-heading\">\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Focus your defense strategy on detecting lateral movements and data exfiltration to the Internet. Pay special attention to the outgoing traffic to detect cybercriminals&#8217; connections. Back up data regularly. Make sure you can quickly access it in an emergency when needed. Use the latest\u00a0<a href=\"https:\/\/www.kaspersky.com\/enterprise-security\/threat-intelligence\" target=\"_blank\" rel=\"noreferrer noopener\">Threat Intelligence<\/a>\u00a0information to stay aware of actual TTPs used by threat actors.<\/h4>\n\n\n\n<h4 class=\"wp-block-heading\">\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Use solutions like\u00a0<a href=\"https:\/\/www.kaspersky.com\/enterprise-security\/endpoint-detection-response-edr\" target=\"_blank\" rel=\"noreferrer noopener\">Kaspersky Endpoint Detection and Response<\/a>\u00a0and\u00a0<a href=\"https:\/\/www.kaspersky.com\/enterprise-security\/managed-detection-and-response\" target=\"_blank\" rel=\"noreferrer noopener\">Kaspersky Managed Detection and Response<\/a>\u00a0service which help to identify and stop an attack at its early stages, before attackers reach their final goals.<\/h4>\n\n\n\n<h4 class=\"wp-block-heading\">\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0To protect the corporate environment, educate your employees. Dedicated training courses can help, such as the ones provided in the\u00a0<a href=\"https:\/\/www.kaspersky.com\/small-to-medium-business-security\/security-awareness-platform\" target=\"_blank\" rel=\"noreferrer noopener\">Kaspersky Automated Security Awareness Platform<\/a>. A free lesson on how to protect from ransomware attacks is available\u00a0<a href=\"https:\/\/ransomware.k-asap.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">here<\/a>.<\/h4>\n\n\n\n<h4 class=\"wp-block-heading\">\u00b7&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Use a reliable endpoint security solution, such as Kaspersky Endpoint Security for Business that is powered by exploit prevention, behavior detection and a remediation engine that is able to roll back malicious actions. KESB also has self-defense mechanisms which can prevent its removal by cybercriminals.<\/h4>\n","protected":false},"excerpt":{"rendered":"<p>Kaspersky\u2019s Global Response Emergency Team (GERT) is called in by companies after a security breach to limit the damage and prevent an attack from spreading. This is known as incident response (IR) and is reserved for mid-size to large organizations. From January to November 2021, nearly every second security incident handled by GERT was connected [&hellip;]<\/p>\n","protected":false},"author":8,"featured_media":30580,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_yoast_wpseo_meta-robots-noindex":"","_et_pb_use_builder":"off","_et_pb_old_content":"","_et_gb_content_width":"","_pr_autopilot_social_copy":"","_yoast_wpseo_opengraph_title":"","_yoast_wpseo_opengraph_description":"","_yoast_wpseo_opengraph_image":"","_yoast_wpseo_opengraph_image_id":0,"_yoast_wpseo_twitter_title":"","_yoast_wpseo_twitter_description":"","_yoast_wpseo_twitter_image":"","_yoast_wpseo_twitter_image_id":0,"_yoast_wpseo_primary_category":439,"_extra_hide_author_box":"","_extra_featured_post":"","_partner_post_id":0,"footnotes":""},"categories":[439],"tags":[],"class_list":["post-30579","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","et-has-post-format-content","et_post_format-et-post-format-standard"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>ransomware incident response - Kaspersky GERT findings | | Saudi Shopper<\/title>\n<meta name=\"description\" content=\"Ransomware incident response: Kaspersky\u2019s GERT handled nearly 50% of IR requests in 2021, up 12 points from 2020. Learn why.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/saudishopper.com.sa\/en\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"ransomware incident response - Kaspersky GERT findings | | Saudi Shopper\" \/>\n<meta property=\"og:description\" content=\"Ransomware incident response: Kaspersky\u2019s GERT handled nearly 50% of IR requests in 2021, up 12 points from 2020. Learn why.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/saudishopper.com.sa\/en\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\/\" \/>\n<meta property=\"og:site_name\" content=\"Saudishopper\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/SaudiShopper\" \/>\n<meta property=\"article:published_time\" content=\"2021-12-14T13:47:45+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-03-27T20:59:18+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2021\/12\/\u0641\u0631\u064a\u0642-\u0643\u0627\u0633\u0628\u0631\u0633\u0643\u064a-\u0644\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629-\u0644\u0644\u062d\u0648\u0627\u062f\u062b-\u0646\u0635\u0641-\u0627\u0644\u062d\u0648\u0627\u062f\u062b-\u0627\u0644\u0623\u0645\u0646\u064a\u0629-\u0645\u0631\u062a\u0628\u0637\u0629-\u0628\u0637\u0644\u0628-\u0627\u0644\u0641\u062f\u064a\u0629_ssict_800_489.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"489\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Mohamed Ghamdi\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@ssict\" \/>\n<meta name=\"twitter:site\" content=\"@ssict\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Mohamed Ghamdi\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\\\/\"},\"author\":{\"name\":\"Mohamed Ghamdi\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#\\\/schema\\\/person\\\/c91ff01097dcdc0d20ea79378eb83440\"},\"headline\":\"Almost every second security event handled by Kaspersky\u2019s incident response team connected to ransomware\",\"datePublished\":\"2021-12-14T13:47:45+00:00\",\"dateModified\":\"2026-03-27T20:59:18+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\\\/\"},\"wordCount\":784,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/wp-content\\\/uploads\\\/2021\\\/12\\\/\u0641\u0631\u064a\u0642-\u0643\u0627\u0633\u0628\u0631\u0633\u0643\u064a-\u0644\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629-\u0644\u0644\u062d\u0648\u0627\u062f\u062b-\u0646\u0635\u0641-\u0627\u0644\u062d\u0648\u0627\u062f\u062b-\u0627\u0644\u0623\u0645\u0646\u064a\u0629-\u0645\u0631\u062a\u0628\u0637\u0629-\u0628\u0637\u0644\u0628-\u0627\u0644\u0641\u062f\u064a\u0629_ssict_800_489.webp\",\"articleSection\":[\"Cybersecurity\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\\\/#respond\"]}],\"copyrightYear\":\"2021\",\"copyrightHolder\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\\\/\",\"url\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\\\/\",\"name\":\"ransomware incident response - Kaspersky GERT findings | | Saudi Shopper\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/wp-content\\\/uploads\\\/2021\\\/12\\\/\u0641\u0631\u064a\u0642-\u0643\u0627\u0633\u0628\u0631\u0633\u0643\u064a-\u0644\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629-\u0644\u0644\u062d\u0648\u0627\u062f\u062b-\u0646\u0635\u0641-\u0627\u0644\u062d\u0648\u0627\u062f\u062b-\u0627\u0644\u0623\u0645\u0646\u064a\u0629-\u0645\u0631\u062a\u0628\u0637\u0629-\u0628\u0637\u0644\u0628-\u0627\u0644\u0641\u062f\u064a\u0629_ssict_800_489.webp\",\"datePublished\":\"2021-12-14T13:47:45+00:00\",\"dateModified\":\"2026-03-27T20:59:18+00:00\",\"description\":\"Ransomware incident response: Kaspersky\u2019s GERT handled nearly 50% of IR requests in 2021, up 12 points from 2020. Learn why.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\\\/#primaryimage\",\"url\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/wp-content\\\/uploads\\\/2021\\\/12\\\/\u0641\u0631\u064a\u0642-\u0643\u0627\u0633\u0628\u0631\u0633\u0643\u064a-\u0644\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629-\u0644\u0644\u062d\u0648\u0627\u062f\u062b-\u0646\u0635\u0641-\u0627\u0644\u062d\u0648\u0627\u062f\u062b-\u0627\u0644\u0623\u0645\u0646\u064a\u0629-\u0645\u0631\u062a\u0628\u0637\u0629-\u0628\u0637\u0644\u0628-\u0627\u0644\u0641\u062f\u064a\u0629_ssict_800_489.webp\",\"contentUrl\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/wp-content\\\/uploads\\\/2021\\\/12\\\/\u0641\u0631\u064a\u0642-\u0643\u0627\u0633\u0628\u0631\u0633\u0643\u064a-\u0644\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629-\u0644\u0644\u062d\u0648\u0627\u062f\u062b-\u0646\u0635\u0641-\u0627\u0644\u062d\u0648\u0627\u062f\u062b-\u0627\u0644\u0623\u0645\u0646\u064a\u0629-\u0645\u0631\u062a\u0628\u0637\u0629-\u0628\u0637\u0644\u0628-\u0627\u0644\u0641\u062f\u064a\u0629_ssict_800_489.webp\",\"width\":800,\"height\":489,\"caption\":\"\u0641\u0631\u064a\u0642 \u0643\u0627\u0633\u0628\u0631\u0633\u0643\u064a \u0644\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629 \u0644\u0644\u062d\u0648\u0627\u062f\u062b \u0646\u0635\u0641 \u0627\u0644\u062d\u0648\u0627\u062f\u062b \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0645\u0631\u062a\u0628\u0637\u0629 \u0628\u0637\u0644\u0628 \u0627\u0644\u0641\u062f\u064a\u0629_ssict_800_489\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Almost every second security event handled by Kaspersky\u2019s incident response team connected to ransomware\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/\",\"name\":\"Saudishopper\",\"description\":\"Saudi ICT Shopper News\",\"publisher\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#organization\",\"name\":\"Saudi ICT News\",\"alternateName\":\"Saudi ICT Shopper News\",\"url\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/SSTrans.png\",\"contentUrl\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/SSTrans.png\",\"width\":423,\"height\":165,\"caption\":\"Saudi ICT News\"},\"image\":{\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/SaudiShopper\",\"https:\\\/\\\/x.com\\\/ssict\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/#\\\/schema\\\/person\\\/c91ff01097dcdc0d20ea79378eb83440\",\"name\":\"Mohamed Ghamdi\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/74c52ae9ccb128bafec358a5e56b2f53c4de12681285f3ab3e85c351172859bc?s=96&d=https%3A%2F%2Fsaudishopper.com.sa%2Fen%2Fwp-content%2Fuploads%2F2020%2F12%2Fcropped-ss-icon--150x150.png&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/74c52ae9ccb128bafec358a5e56b2f53c4de12681285f3ab3e85c351172859bc?s=96&d=https%3A%2F%2Fsaudishopper.com.sa%2Fen%2Fwp-content%2Fuploads%2F2020%2F12%2Fcropped-ss-icon--150x150.png&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/74c52ae9ccb128bafec358a5e56b2f53c4de12681285f3ab3e85c351172859bc?s=96&d=https%3A%2F%2Fsaudishopper.com.sa%2Fen%2Fwp-content%2Fuploads%2F2020%2F12%2Fcropped-ss-icon--150x150.png&r=g\",\"caption\":\"Mohamed Ghamdi\"},\"url\":\"https:\\\/\\\/saudishopper.com.sa\\\/en\\\/author\\\/mgamdi\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"ransomware incident response - Kaspersky GERT findings | | Saudi Shopper","description":"Ransomware incident response: Kaspersky\u2019s GERT handled nearly 50% of IR requests in 2021, up 12 points from 2020. Learn why.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/saudishopper.com.sa\/en\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\/","og_locale":"en_US","og_type":"article","og_title":"ransomware incident response - Kaspersky GERT findings | | Saudi Shopper","og_description":"Ransomware incident response: Kaspersky\u2019s GERT handled nearly 50% of IR requests in 2021, up 12 points from 2020. Learn why.","og_url":"https:\/\/saudishopper.com.sa\/en\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\/","og_site_name":"Saudishopper","article_publisher":"https:\/\/www.facebook.com\/SaudiShopper","article_published_time":"2021-12-14T13:47:45+00:00","article_modified_time":"2026-03-27T20:59:18+00:00","og_image":[{"width":800,"height":489,"url":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2021\/12\/\u0641\u0631\u064a\u0642-\u0643\u0627\u0633\u0628\u0631\u0633\u0643\u064a-\u0644\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629-\u0644\u0644\u062d\u0648\u0627\u062f\u062b-\u0646\u0635\u0641-\u0627\u0644\u062d\u0648\u0627\u062f\u062b-\u0627\u0644\u0623\u0645\u0646\u064a\u0629-\u0645\u0631\u062a\u0628\u0637\u0629-\u0628\u0637\u0644\u0628-\u0627\u0644\u0641\u062f\u064a\u0629_ssict_800_489.webp","type":"image\/webp"}],"author":"Mohamed Ghamdi","twitter_card":"summary_large_image","twitter_creator":"@ssict","twitter_site":"@ssict","twitter_misc":{"Written by":"Mohamed Ghamdi","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/saudishopper.com.sa\/en\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\/#article","isPartOf":{"@id":"https:\/\/saudishopper.com.sa\/en\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\/"},"author":{"name":"Mohamed Ghamdi","@id":"https:\/\/saudishopper.com.sa\/en\/#\/schema\/person\/c91ff01097dcdc0d20ea79378eb83440"},"headline":"Almost every second security event handled by Kaspersky\u2019s incident response team connected to ransomware","datePublished":"2021-12-14T13:47:45+00:00","dateModified":"2026-03-27T20:59:18+00:00","mainEntityOfPage":{"@id":"https:\/\/saudishopper.com.sa\/en\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\/"},"wordCount":784,"commentCount":0,"publisher":{"@id":"https:\/\/saudishopper.com.sa\/en\/#organization"},"image":{"@id":"https:\/\/saudishopper.com.sa\/en\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\/#primaryimage"},"thumbnailUrl":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2021\/12\/\u0641\u0631\u064a\u0642-\u0643\u0627\u0633\u0628\u0631\u0633\u0643\u064a-\u0644\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629-\u0644\u0644\u062d\u0648\u0627\u062f\u062b-\u0646\u0635\u0641-\u0627\u0644\u062d\u0648\u0627\u062f\u062b-\u0627\u0644\u0623\u0645\u0646\u064a\u0629-\u0645\u0631\u062a\u0628\u0637\u0629-\u0628\u0637\u0644\u0628-\u0627\u0644\u0641\u062f\u064a\u0629_ssict_800_489.webp","articleSection":["Cybersecurity"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/saudishopper.com.sa\/en\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\/#respond"]}],"copyrightYear":"2021","copyrightHolder":{"@id":"https:\/\/saudishopper.com.sa\/en\/#organization"}},{"@type":"WebPage","@id":"https:\/\/saudishopper.com.sa\/en\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\/","url":"https:\/\/saudishopper.com.sa\/en\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\/","name":"ransomware incident response - Kaspersky GERT findings | | Saudi Shopper","isPartOf":{"@id":"https:\/\/saudishopper.com.sa\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/saudishopper.com.sa\/en\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\/#primaryimage"},"image":{"@id":"https:\/\/saudishopper.com.sa\/en\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\/#primaryimage"},"thumbnailUrl":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2021\/12\/\u0641\u0631\u064a\u0642-\u0643\u0627\u0633\u0628\u0631\u0633\u0643\u064a-\u0644\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629-\u0644\u0644\u062d\u0648\u0627\u062f\u062b-\u0646\u0635\u0641-\u0627\u0644\u062d\u0648\u0627\u062f\u062b-\u0627\u0644\u0623\u0645\u0646\u064a\u0629-\u0645\u0631\u062a\u0628\u0637\u0629-\u0628\u0637\u0644\u0628-\u0627\u0644\u0641\u062f\u064a\u0629_ssict_800_489.webp","datePublished":"2021-12-14T13:47:45+00:00","dateModified":"2026-03-27T20:59:18+00:00","description":"Ransomware incident response: Kaspersky\u2019s GERT handled nearly 50% of IR requests in 2021, up 12 points from 2020. Learn why.","breadcrumb":{"@id":"https:\/\/saudishopper.com.sa\/en\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/saudishopper.com.sa\/en\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/saudishopper.com.sa\/en\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\/#primaryimage","url":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2021\/12\/\u0641\u0631\u064a\u0642-\u0643\u0627\u0633\u0628\u0631\u0633\u0643\u064a-\u0644\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629-\u0644\u0644\u062d\u0648\u0627\u062f\u062b-\u0646\u0635\u0641-\u0627\u0644\u062d\u0648\u0627\u062f\u062b-\u0627\u0644\u0623\u0645\u0646\u064a\u0629-\u0645\u0631\u062a\u0628\u0637\u0629-\u0628\u0637\u0644\u0628-\u0627\u0644\u0641\u062f\u064a\u0629_ssict_800_489.webp","contentUrl":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2021\/12\/\u0641\u0631\u064a\u0642-\u0643\u0627\u0633\u0628\u0631\u0633\u0643\u064a-\u0644\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629-\u0644\u0644\u062d\u0648\u0627\u062f\u062b-\u0646\u0635\u0641-\u0627\u0644\u062d\u0648\u0627\u062f\u062b-\u0627\u0644\u0623\u0645\u0646\u064a\u0629-\u0645\u0631\u062a\u0628\u0637\u0629-\u0628\u0637\u0644\u0628-\u0627\u0644\u0641\u062f\u064a\u0629_ssict_800_489.webp","width":800,"height":489,"caption":"\u0641\u0631\u064a\u0642 \u0643\u0627\u0633\u0628\u0631\u0633\u0643\u064a \u0644\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629 \u0644\u0644\u062d\u0648\u0627\u062f\u062b \u0646\u0635\u0641 \u0627\u0644\u062d\u0648\u0627\u062f\u062b \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0645\u0631\u062a\u0628\u0637\u0629 \u0628\u0637\u0644\u0628 \u0627\u0644\u0641\u062f\u064a\u0629_ssict_800_489"},{"@type":"BreadcrumbList","@id":"https:\/\/saudishopper.com.sa\/en\/almost-every-second-security-event-handled-by-kasperskys-incident-response-team-connected-to-ransomware\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/saudishopper.com.sa\/en\/"},{"@type":"ListItem","position":2,"name":"Almost every second security event handled by Kaspersky\u2019s incident response team connected to ransomware"}]},{"@type":"WebSite","@id":"https:\/\/saudishopper.com.sa\/en\/#website","url":"https:\/\/saudishopper.com.sa\/en\/","name":"Saudishopper","description":"Saudi ICT Shopper News","publisher":{"@id":"https:\/\/saudishopper.com.sa\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/saudishopper.com.sa\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/saudishopper.com.sa\/en\/#organization","name":"Saudi ICT News","alternateName":"Saudi ICT Shopper News","url":"https:\/\/saudishopper.com.sa\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/saudishopper.com.sa\/en\/#\/schema\/logo\/image\/","url":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2020\/08\/SSTrans.png","contentUrl":"https:\/\/saudishopper.com.sa\/en\/wp-content\/uploads\/2020\/08\/SSTrans.png","width":423,"height":165,"caption":"Saudi ICT News"},"image":{"@id":"https:\/\/saudishopper.com.sa\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/SaudiShopper","https:\/\/x.com\/ssict"]},{"@type":"Person","@id":"https:\/\/saudishopper.com.sa\/en\/#\/schema\/person\/c91ff01097dcdc0d20ea79378eb83440","name":"Mohamed Ghamdi","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/74c52ae9ccb128bafec358a5e56b2f53c4de12681285f3ab3e85c351172859bc?s=96&d=https%3A%2F%2Fsaudishopper.com.sa%2Fen%2Fwp-content%2Fuploads%2F2020%2F12%2Fcropped-ss-icon--150x150.png&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/74c52ae9ccb128bafec358a5e56b2f53c4de12681285f3ab3e85c351172859bc?s=96&d=https%3A%2F%2Fsaudishopper.com.sa%2Fen%2Fwp-content%2Fuploads%2F2020%2F12%2Fcropped-ss-icon--150x150.png&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/74c52ae9ccb128bafec358a5e56b2f53c4de12681285f3ab3e85c351172859bc?s=96&d=https%3A%2F%2Fsaudishopper.com.sa%2Fen%2Fwp-content%2Fuploads%2F2020%2F12%2Fcropped-ss-icon--150x150.png&r=g","caption":"Mohamed Ghamdi"},"url":"https:\/\/saudishopper.com.sa\/en\/author\/mgamdi\/"}]}},"_links":{"self":[{"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/posts\/30579","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/comments?post=30579"}],"version-history":[{"count":1,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/posts\/30579\/revisions"}],"predecessor-version":[{"id":69364,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/posts\/30579\/revisions\/69364"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/media\/30580"}],"wp:attachment":[{"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/media?parent=30579"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/categories?post=30579"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/saudishopper.com.sa\/en\/wp-json\/wp\/v2\/tags?post=30579"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}