1. MAT-SU BOROUGH
2018 Cyber Attack

2. 2018 Cyber Attack What Happened Why It Happened The Response
Going Forward

3. The Timeline Victim 210 Zero Day What Happened? Theoretical Exploit
Late April phishing
Late May heavy activity
June dormant
July Discovery and Crypto-Locked
Zero Day
Theoretical
Exploit
Trojan- Emotet
Credential Stealing – Dridex
PowerShell Empire
Ransom Ware - BitPaymer
The Timeline
Victim 210

4. Why it Happened On Our Side What They Wanted Staffing Funding
Priorities
Complacency
Data Gathering
Disruption
Ransom

5. Mat-Su Borough Response
Public Relations
Vendors
Volunteers
Long hours
Emergency funding
Incident Response
Project Management
Minimum Viable Product (MVP)
Communication Communication COMMUNICATION
Take Care Of
Your Users!

6. Communicate…Communicate…Communicate
Going Forward
We Can’t Do
This Alone
Partnering
MS-ISAC
DHS – US Cert
InfraGard
CIO Council
Smart Community Forum
Federal
State
Local
Commercial
Communicate…Communicate…Communicate

7. Security Portfolio

8. Discussion