20.500.12556/DKUM-90731 Izsiljevalski virusi kot pomembna kibernetska grožnja za organizacije Ransomware as a significant cybersecurity threat to organizations Organizacije so pod vedno večjim pritiskom napadov izsiljevalskih virusov. V napadih napadalci zašifrirajo podatke in sisteme organizacije. Uspešni napadi lahko ohromijo poslovanje organizacije za več tednov, poleg tega lahko povzročijo nepopravljivo škodo na informacijskih sistemih organizacij. Napadalci so za svoje napade finančno motivirani in posledično skoraj vedno iščejo odkupnino. Razmahnil se je poslovni model izsiljevalskih virusov kot storitve, kjer razvijalci viruse prodajajo zainteresiranim posameznikom in manjšim hekerskim grupam. Posledično število napadov in njihova škoda raste iz leta v leto. V diplomski nalogi preučujemo izsiljevalske viruse, njihovo delovanje, posledice in ekonomični model hekerskih skupin. Raziskujemo tudi, kako napadalci pridobijo dostope do sistemov. S pomočjo literature in analize primerov ugotavljamo, kaj je šlo narobe in prav v odmevnih incidentih. S tem želimo ugotoviti in priporočati dobre prakse organizacijam. Z uporabo orodja POWER BI Desktop analiziramo podatkovno bazo podjetja Comparitech, kjer so beležili potrjene napade z izsiljevalskimi virusi od leta 2018 naprej do prvega tedna avgusta 2024. Cilj naloge je ugotoviti, kako naj se organizacije pripravijo in reagirajo na grožnje izsiljevalskih virusov. Organizations are under increasing pressure from ransomware attacks. In ransomware attacks, the attackers encrypt the organization's data and systems. Successful attacks can paralyze an organization's operations for several weeks or they can cause irreparable damage to the organization's information systems. Attackers are financially motivated for their attacks and, as a result, almost always seek ransom payments. A ransomware-as-a-service business model has taken off where developers sell their equipment to interested individuals and smaller hacker groups. As a result, the number of attacks and their damage increases from year to year. In this thesis, we examine ransomware, its operation, its consequences, and the economic model of hacker groups. We also investigate how attackers gain access to systems. Utilizing literature and case analysis, we find out what went wrong and right in high-profile incidents. Thus, we want to identify and recommend good practices to organizations. Using the POWER BI Desktop tool, we analyze a database from the Comparitech company where they recorded confirmed ransomware attacks from 2018 to the first week of August 2024. The goal of the thesis is to determine how organizations should prepare and react to ransomware threats. izsiljevalski virusi socialni inženiring varnostni incidenti napadi organizacije ransomware social engineering security incident attacks organizations true true false Slovenski jezik Angleški jezik Diplomsko delo/naloga 2024-09-18 11:30:12 2024-10-04 10:58:37 2024-10-05 03:13:03 0000-00-00 00:00:00 2024 0 Kranj 0 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 210255875 UN_Kogovsek_Jernej_2024.pdf UN_Kogovsek_Jernej_2024.pdf 1 86A22177C1D300FC12BE9ADED31BCF73 8f354dcde0e048baf016e353b1de4ec7da472dedd3a8443e25d4242f44d35ff5 38ee5cdf-75a5-11ef-8939-00155d000105 https://dk.um.si/Dokument.php?lang=slv&id=185388 Fakulteta za organizacijske vede 0 0 0