Tag

How Ransomware Spreads

Explains the attack vectors and techniques ransomware operators use to infiltrate systems, including phishing emails, exploited vulnerabilities, remote desktop protocol abuse, and supply chain compromises.

posts

Ransomware

How Ransomware Spreads: 7 Attack Vectors in 2025

In February 2024, Change Healthcare — the payment processor handling roughly one-third of all U.S. medical claims — was hit by the ALPHV/BlackCat ransomware group. The result: $872 million in direct costs reported by UnitedHealth Group, months of disrupted pharmacy operations, and the personal health data of over 100 million

Carl B. Johnson Jul 15, 2025 7 min read
Ransomware

How Ransomware Spreads: 7 Paths Into Your Network

In September 2023, MGM Resorts lost an estimated $100 million after a social engineering phone call — just one phone call — gave threat actors the foothold they needed to deploy ransomware across the company's entire infrastructure. Slot machines went dark. Hotel key cards stopped working. Reservation systems collapsed. All

Carl B. Johnson Feb 09, 2024 7 min read
Ransomware

How Ransomware Spreads: 6 Attack Vectors You Must Know

In February 2022, the FBI and CISA issued a joint advisory warning that ransomware incidents against 14 of 16 U.S. critical infrastructure sectors had increased dramatically. That advisory wasn't theoretical — it followed real attacks against water treatment facilities, hospitals, and food processors. If you're searching

Carl B. Johnson Mar 18, 2022 7 min read
Ransomware

How Ransomware Spreads: 5 Attack Vectors You Must Block

A Single Click Cost One Hospital $67 Million In September 2020, Universal Health Services — one of the largest healthcare providers in the U.S. — got hit by the Ryuk ransomware strain. The attack shut down systems across 400 facilities. Patients were diverted. Records went analog. The final damage? An estimated

Carl B. Johnson Mar 12, 2021 7 min read
Ransomware

How Ransomware Spreads: 7 Paths Into Your Network

In May 2021, a single compromised VPN password shut down the largest fuel pipeline in the United States. The Colonial Pipeline attack didn't start with some exotic zero-day exploit. It started with a stolen credential. That's the reality of how ransomware spreads — and it's

Carl B. Johnson Nov 30, 2019 6 min read