Connect with us
Seder Passover
Israel Bonds RRSP
JNF Canada

Features

Managing Ransomware

Yuri Kogan (left) and Zev Cohen

By YURI KOGAN and ZEV COHEN of Ergo Oriens Crisis Management 

In the ‘All Connected World’ ransomware attacks gain traction. Criminals constantly improve at monetizing their access to your network & data. They target an organization, lock up the data, and then demand money hundreds of thousands of dollars or more – in exchange for releasing it to be paid in untraceable crypto- currency. Sometimes, restoration of data from backups is possible. Bypassing the encryption is also an option, but in many cases the bad guys find and destroy backups and use state-of-the-art encryption. The attackers often create backdoors to allow future infiltrations easier, so this may not be the last time you hear from them. 

 

 

 

 

What can be done? What should be done? Should you pay? And what happens when the ransom is paid? What are the guarantees the perpetrators intend to hold up their end of the deal? And how do you know that whoever just propelled your business into the stone age can actually bring it back? 

Ransomware attacks are automated but certainly NOT automatic. Humans stand behind these attacks, and as this is the issue professional crisis managers and negotiators, together with an experienced technological incident response team (IRT) can minimize loss and expedite the safe return of the organization to normal operations. 

Ransomware negotiations are similar to business negotiations. Similar but not the same. Timing is crucial and simply playing for time may mean the attacker will stop responding and turn to the next, more responsive, victim, leaving you with your system beyond reach. Having said that doesn’t mean the victim should rush forward and immediately pay the ransom. Time is of the essence and should be skillfully used to explore possible ways to communicate with the perpetrator. In parallel the IRT carefully assesses the situation from a technological point of view, bringing into account possibilities of overcoming the attack and resuming operations by using technological means alone. 

A professional multi-disciplinary ransomware management team will navigate to the most suitable alternative, gain knowledge on the perpetrators and bring you back to safety while minimizing your losses. Using tested and proven after-action- 

debriefing techniques the team will significantly improve the victim’s defenses and heighten the odds this will not happen to you again. 

Are there preset protocols to follow? A list of Do’s and Don’ts? Well, ransomware attacks differ, but there are some rules of the thumb to follow. 

The first and foremost advise would be – BE PREPARED. This means businesses should follow best practice protocols to defend and preserve their IT environment. Backing up data, constantly monitoring the system and the threat environment either by in-house (less likely to be done by small and medium businesses) or outsourced experts, conducting drills, penetration tests and generally educating the employees to the cyber-threat and the ways to mitigate it. Purchasing a cyber- incident insurance plan is a prudent step to take. 

As all hell breaks loose, an internal assessment of the situation and checking for existing backup files and their integrity should be the first thing to do. Unfortunately, many businesses do not follow best practice methods and therefore are more vulnerable to increased damage. The possibility of the attack being internally motivated should also be looked into, but this should not be the focus of the victim’s attention. Some of these processes could be performed by an internal IT team, but the best option would be to contact an experienced cyber-incident response team (IRT). For most businesses running an internal IRT team is an expensive and mostly unnecessary function. It is worth mentioning that the internal IT team will usually specialize in the routine maintenance and operation of the IT environment while a seasoned IRT continuously monitors, researches and deals with ransomware attacks. 

The next point would be to establish a communications route to the attackers. Often the attackers give an anonymized communication line to the victims over which to guide them in the process of ransom payment, as this requires crypto- currency knowledge, that most people do not routinely have. 

Once communications are established, the ransom negotiator will try to verify the attacker’s ability to make the highjacked data available again. This is crucial, as experience shows that some attacks are initiated by inexperienced attackers using questionable tools and scripts capable of hijacking the data but not of bringing it back. 

Next, the negotiator will initiate a communications exchange with the attacker, aiming to reduce the ransom price. This should be done in sync with the IRT experts, using the time to explore every alley, street and avenue to restoring system functionality without actually paying the ransom. 

The decision of whether to pay the ransom or not should be made by top level management, taking into account not only the ability to independently restore the IT environment but also the time it would take, as for most businesses having their IT systems inoperable means financial bleeding that should be minimized. Not least of all, senior management can consider the impact of ransom payment on the financial soundness of the company. This would be also be the place to mention that in some jurisdictions paying ransom to stop a ransomware attack could be considered illegal, or at the least regulated by the authorities. An experienced legal counsel should be consulted about navigating this issue. 

When the victim’s IT environment is brought back to a functional state and the incident declared closed, it would be high time to conduct an after-action-review. When conducted by experienced professionals as a transparent process aimed at minimizing the chance of future attacks and improving robustness. Rather than punishing stake holders for past mistakes, the review highlights organizational strengths to preserve, and vulnerabilities to mend, resulting in improved means and processes that protect against, and when necessary, minimize future losses to cyber incidents. 

Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Features

The Israeli dentist who got to know people like Yahya Simwar and thousands of other Palestinian prisoners better than anyone

By BERNIE BELLAN I wanted to depart from the usual post-event analysis of what happened on Saturday, April 13 in which so many pundits have been engaging. After all, by the time this is read, Israel may have struck back against Iran, so to engage in speculation as to how Israel should respond to what Iran did that day will probably be largely outdated.
Instead, I want to write about an article that appeared on the Haaretz website on Sunday, April 14. Now, if you’re not familiar with Haaretz, I’ve been referring to that news source many times over the past couple of years – not because of its political orientation – which is decidedly leftist, but because it often contains the kind of analysis you’re just not going to see anywhere else.
The particular article that snagged my attention had this headline: ‘I Asked Sinwar, Is It Worth 10,000 Innocent Gazans Dying? He Said, Even 100,000 Is Worth It’
The person who gave that quote is someone by the name of Yuval Bitton. I doubt you’ve heard his name before. Bitton was head of something called the “Intelligence Division of the Israel Prison Service.”
The article consists of an interview Bitton recently gave, in which he recounts his career working within the Israeli prison service, where he had the opportunity to interact with some of the most dangerous terrorists Israel had taken prisoner over the past 30 years.
What was Bitton’s backround? you might wonder. He was a dentist!
But it turns out that, as a dentist, he was able to enlist the trust of even the most embittered enemies of Israel – not to confide anything that would be considered any sort of information relevant to security, but to talk more openly about their feelings. The reason, as Bitton explains in the interview, is that when he was examining someone’s teeth, his patients would let their guards down – not out of fear of Israeli intelligence, but our of fear what their fellow Palestinian prisoners might hear what they said.
Here’s an excerpt from the interview in which Bitton offers a fascinating insight as to how he was immediately able to tell whether a prisoner was Fatah or Hamas. The interviewer explains that “While preparing for this interview, I found an item from 2005 in which you (Bitton) explained the differences between the teeth of prisoners who are affiliated with Fatah and those who are members of Hamas.”
Bitton: “The teeth of Fatah inmates are in poor condition, whereas Hamas prisoners maintain hygiene and purity. Theirs is a religious way of life. Ascetic. With rigid discipline. They pray five times a day, don’t touch sweets, don’t smoke. There’s no such thing as smoking in Hamas. You see a 50-year-old prisoner who is entirely free of any signs of illness. No tooth decay. I’d say, ‘You’re Hamas? They would say, ‘Yes, how did you know?’ ‘By the teeth,’ I replied. A very basic insight.
“Everything has meaning – it’s the same with regard to their way of life, for example. At 9 P.M., there is a total lights-out in the prison’s Hamas wings; in the Fatah wings they watch television all night.”
Interviewer: “At that time you were an inquisitive dentist, with good diagnostic skills. How did you end up as an intelligence officer?”
Bitton: “There was an intelligence officer I knew who hung out a lot in the clinic, which is a supposedly safe place for prisoners. They feel free to talk there, because their organizations aren’t monitoring or eavesdropping on them. He saw that I was talking to them all the time, and I also talked with him about all kinds of insight that I had about them. He realized that I could be a platform for recruiting sources and suggested that I join the prisons service intelligence division.”
In time, Bitton moved up the ranks to the point where he actually became head of Israel Prison Intelligence. It was in that capacity, he explains, that he realized what a terrible mistake it would be to release (Hamas leader in Gaza) Yahyha Sinwar in what became the swap of 1,026 Palestinian prisoners for Gilad Shalit.
Bitton offers some fascinating insights into the differences between the mindsets of Fatah and Hamas. At one point he notes, referring to differences between Fatah and Hamas: “Fatah talked about the 1967 borders, about the occupation, about the Palestinian people. To me, the Hamas inmates would say, ‘There’s neither 1967 nor 1948. There are no borders and there is nothing to talk about. You are on Waqf land, Muslim sacred ground, and you have no place here.’ “
He goes on to describe the realization by members of Fatah that Hamas members would have no hesitation in killing them the same as they would kill any Israeli. That happened in 2007 when Hamas – which had been cooperating with Fatah in governing Gaza to that point, suddenly turned on Fatah members.
Bitton says: “We [Israelis] were taken by surprise by the horrific disaster of October 7. I’m certain that in Fatah they weren’t surprised. They’d already seen it happening – they’d already seen how people were thrown off the roof, without a drop of mercy. How they [Hamas] tied Fatah activists, still alive, to cars and dragged them through the streets until they died. From Hamas’ point of view, members of Fatah are not their brothers. So what if they are Muslims too? They are an obstacle on the road to achieving the goal: a sharia state.”
He continues. Members of Fatah warned him: “Hamas will do to you what they did to us. You’re cultivating Hamas, injecting money into Gaza, humiliating Fatah, but in the end they will do to you what they did to us.”
And, in one particularly blood-curdling story, Bitton describes Sinwar’s absolute barbarism:
“There was a high-ranking Hamasnik in prison whom Sinwar suspected of collaboration. When he got out, they hanged that person in the city square and brought his 9-year-old son to watch. Is there anything crueler than that?”

I tell these stories here not to remind that Israelis live in a “very tough neighbourhood,” which is the phrase we’ve so often heard used to describe how very dangerous it is for a non-Muslim country to exist surrounded by Muslim countries – which we all learned many years ago, but to point out the importance of getting inside the minds of your enemies.
Has Israel miscalculated time and time again when it comes to misperceiving the intent of its enemies? Yes. We now know how badly Israeli intelligence misinterpreted clear signals that Egypt was going to launch an attack across the Suez Canal in 1973, and it didn’t take long to understand that, once again, Israeli intelligence and especially Netanyahu totally missed clear signals of what Hamas was planning on October 7.
And now, we’re hearing that, once again, Israeli strategists never thought Iran would react the way it did when Israel decided to bomb Iran’s consulate in Damascus.
I’ll end this particular article by referring to the incredible contribution that the U.S. – aided by other countries, including Britain, France, and especially Jordan, made in coming to Israel’s aid on April 13.
Reports are still filtering in about the weaponry that was used to prevent anything but the smallest number of Iranian missiles from reaching their targets in Israel. The Americans deployed new counter missile systems that had never been used in real-time situations previously – enabling them to launch counter weapons high into space to intercept Iranian missiles.
Without the aid of those other countries Israel would have suffered much worse on April 13. Yet, what I am afraid we will see is an even further insistence on the part of Netanyahu and the right wing fanatics who support him to thumb their noses at their American allies and entrench themselves even further in the ongoing series of mistakes they’ve made since October 7.
And our major Jewish organizations, including CIJA, B’nai Brith, and our Jewish Federation will say nary a word in criticism. As Yuval Bitton explains so well in that Haaretz interview, if it’s anything Ithe Israeli government and the Israeli security apparatus is very good at, it’s totally misinterpreting opportunities how to properly engage with your enemies.

Continue Reading

Features

Brothers Arnie & Michael Usiskin’s Warkov-Safeer a throwback to days of long ago

Arnie (left) & Michael Usiskin

By MYRON LOVE Step into Warkov-Safeer on Hargrave in the Exchange District and you’ll feel like you’ve walked back in time to an earlier era. The shelves are crammed full of shoe-related accessories – soles, heels, laces, polish, threads, needles, dyes – and other leather-related needs. 
“There used to be a shoemaker on every corner,” says Michael Usiskin, whose family has operated the wholesaler for more than 50 years.  “People used to keep their shoes for years.  They might resole them ten times.  Now you might have five pairs in your closet – different shoes for different occasions, and buy a new pair every year or two.”
Usiskin adds that “there is no place else like us between Toronto and Vancouver.  When we moved here in the 1970s, this area was buzzing with garment workers and sewing machines. This was a hub of activity. It’s a lot quieter now.”
While the Usiskin Family has been connected with the company for 85 years, Michael Usiskin points out that the company – originally catering to the horse trade – was actually founded in 1930 in Winkler by the eponymous Warkov brothers – Jacob, Mendel and Morris – and their brother-in-law, Barney Safeer.  Larry Usiskin, father of Michael and his brother and partner, Arnie, went to work for the company in 1939, four years after the partners moved the business to Winnipeg (to a location at Selkirk and Main).
The late Larry Usiskin and his late wife, Roz, were leaders in Winnipeg’s secular Yiddishist community.  The Usiskin brothers received their elementary schooling at the secular Sholem Aleichem School at the corner of Pritchard and Salter in the old North End.
“Our dad was maybe 16 or 17 when he went to work for Warkov-Safeer in 1939,” Michael Usiskin notes.  “He would do deliveries on his bike to shoe repair shops.”
He never left.
Michael Usiskin relates that, during the war years, the company relocated to larger premises at King and Bannatyne to accommodate a growing demand for its expanding product lines.
Larry Usiskin bought the business in 1969 – with a partner – in 1969.  It was not a given that either Michael or Arnie would join the family endeavour.  Michael was the first of the brothers to come on board. That was in 1984.
Michael had been working for Videon Public Access TV for the previous seven years.  “I was a producer, editor and camera man,” he recalls. 
Among the programs he worked on were Noach Witman’s Jewish television hour and such classics as “Math with Marty”  and Natalie and Ronne Pollock’s show.
“Dad began talking about retirement,” Michael recounts.   “With budget cuts and lay-offs coming to Videon, it was a good time for me to get out and join Dad in business.”
Michael became Warkov-Safeer’s managing partner in 1995 on the senior Usiskin’s retirement.  Arnie joined his brother in partnership in 1998.
“I had been working for CBC for 17 years as a technician,” Arnie relates.  “A confluence of events presented me with the opportunity to go into the family business.”
Although Arnie bought out Michael’s previous partner,  he continued on at CBC for another four years before accepting a buyout. 
“I went from show business into shoe business,” he jokes.
Today, Warkov-Safeer has customers from Ontario to the West Coast. “Things have changed considerably over the years for our business,” Michael notes. “Our shoe market is now solely more expensive brands. And we also supply a lot of leather and leather-related products for hobbyists.”
He reports that a lot of their marketing has long been done by word of mouth.  “We used to go to a fair number of trade shows, but not so much anymore,” he adds.  “We now have a number of sales representatives throughout Western Canada and Ontario.”
“We’re not high tech,” Arnie points out.  “We have a niche market.  What we sell is a form of recycling – allowing people to look after and fix their shoes.  We see a trend developing in this area.”
While Arnie and Michael Usiskin have no plans to retire quite yet,  they do acknowledge though they are not getting any younger and would welcome someone younger to come into the business who might be willing one day to lead Warkov-Safeer into the future. 

Continue Reading

Features

Winnipeg-based singer/songwriter Orit Shimoni spreading her wings again after being grounded by Covid lockdown

By MYRON LOVE In the spring of 2020, Canadian-Israeli singer/songwriter Orit Shimoni was in the midst of a cross Canada tour. She had started in Vancouver, had a show in Edmonton and stepped off the train in Winnipeg just as the Covid  lockdowns were underway.  Shimoni was essentially stuck In our city, knowing virtually on one.
Four years later, she is still here, having found a supportive community and, while she has resumed touring, she has decided for now to make Winnipeg her home base.
“I really appreciate the artistic scene here,” she says.  “I plan on being away on tour a lot, but I have understanding and rent is affordable.”
Our community also benefits from having such a multi-talented individual such as Shimoni living among us.  Over the past 15 years, the former teacher – with a Masters degree in Theology, has toured worldwide as well as producing 12 albums of original works to date – the most recent being “Winnipeg”, a series of commentaries on her life experiences, wishes and dreams over the past couple of years – which was released last fall.
She has also produced an album of songs for Chanukah.
According to her website, Shimoni expounds on her “truths, her feelings and tells her stories” in venues that include bars, clubs and cafes, coffee houses and folkfests, theatres, back yards, living rooms, and trains.  Her music is described as a potpourri of “bold and raw, soft and tender, witty and humourous,” incorporating  empathy and condemnation, spirituality and whimsy,” and crosses different genres such as blues, folk and country and “speaks to the human condition, the human heart and the times  that we find ourselves in”.
She observes that the inspiration for her songs can come from anywhere, including conversations with others, nature, history, news and her own lived experiences.
In response to the ongoing situation in Israel today, she reports that she is trying to use her music to create positive energy in trying to foster a commonality between people.

Red Door Painting by Orit Shimoni


In addition to adding to her musical corpus while in Winnipeg these past four years, Shimoni notes that she has used her enforced lockdown downtime to explore other ventures. One of those new areas that she has been focusing on is art.
“I have always had an interest in painting,” she says.  While she hasn’t had an exhibition of her painting yet, she has prints for sale and is available for commissions.
“My last two albums have my paintings as the cover art,” she points out.
Another area that the singer/songwriter has been developing over the past four years is writing and performing personalized songs for special occasions.  “I can bring to birthdays, weddings and memorials personalized songs to mark the occasion,” she notes.  “It is another way that I have diversified what I can offer.”
One project she completed last year – with support from the Jewish Foundation of Manitoba – was “singing the songs of our elders” in which she interviewed several Jewish seniors – with the help of Gray Academy students – and told their stories in song. 
Among other performances she has given locally over the past year was a special appearance before a group of Holocaust survivors at the Gwen Secter Creative Living Centre, a self-written, one woman show – called “The Wandering Jew” at Tarbut in November and, most recently, a concert last month at Gordie’s Coffee House on Sterling Lyon Parkway.
Another new area of exploration for Shimoni is animation.  In an interview with Roots Music Canada last fall, she embarked on an ambitious animation project based on her song “One Voice,” which she wrote a few years ago, and which perfectly reflects the anxiety that many people are feeling in these troubled times.
 Last October, she was back on tour – with renowned American songwriter Dan Bern  – after three years away from the road.  She did two weeks’ worth of concerts in American West Coast states and Colorado  – and. in late January, she began a month-long journey that started with shows in Toronto, Ottawa and Montreal and stops throughout the Midwest as far as Texas.
She recently returned to Montreal for a show and is currently doing a series of concerts in Germany – with further stops in Belgium, Holland and England.
“It will be good to be back in Europe,” she says.  “I have developed a loyal following in Germany and elsewhere.”
A writer for one publication in Berlin described Shimoni as ‘one of the most interesting singer/songwriters I have met in a long time.”
Here at home, Winnipeg concert promoter Ian Mattey observes that “with each concert, her audience has grown – a testament to the wonderful balance of her lyrical genius, haunting voice and musical talent.”
The singer/songwriter feels grounded – in a good way – in our fair city – and we hope that she will be with us for some time to come.

Continue Reading

Copyright © 2017 - 2023 Jewish Post & News