Events
Day 1: multiple hospital computers are infected with ransomwareRansomware installs itself on ITHelpDesk-01Dave seen leaving building on video after installNaNa account created on Adam's old work stationRemote login to ITHelpDesk-01 computer using NaNa account
Logged into GMail, downloaded malware from email attachmentAdam quitsAdam returns to work
Receives denial of promotion letterDay 2: USB Rubber Ducky found plugged into one of the infected computersDay 3: accounting dept. computer is re-infected
(clerk backed up some files to a USB)
Adam is arrestedPeriods
Period to pay ransomwareAdam at hospital battling malware attack
Comments