Forum Discussion

cosimo mercuro's avatar
cosimo mercuro
Copper Contributor
Sep 12, 2020

Ransomware Lockbit and Windows Server 2019 DC

Hi.  Today I've detected a Lockbit ramsonware attack  at 7.00 a.m (out of working hours) on my Windows Server 2010 DC that is actually unusable. The question is: how is it possible that on a DC use...
Active Directory
Windows Server
  • cosimo mercuro's avatar
    cosimo mercuro
    Copper Contributor
    Sep 13, 2020

    Dave Patrick 

    Hi Dave. 

    The reason of my post is not to know what is a ransomware or how to fight aganist it and restore all things.

    I know well this type of cyber attacks.

    My doubts regards how this type of malware can affect a Windows Server DC that, for definition, is not used to browse internet, access mail, and do all other activities that usually a Client computer does any day.

    This time the ransomware has attacked a server not a client.

    And this server, in particular, fill only the AD role and WSUS role.

    Nothing else.

     

Resources