🟠 High | Source: The Register — Security
Ransomware gangs are increasingly targeting mid-level IT managers in their 40s rather than C-suite executives, recognising that these individuals often hold privileged access to critical systems and are less protected by executive security measures. This tactic exploits the reality that IT managers frequently have broad administrative rights across cloud and on-premises environments without the same level of monitoring or security awareness training as senior leadership. The shift represents a deliberate social engineering evolution aimed at maximising access while minimising detection.
Security Architect’s Take: Audit and enforce least-privilege access for IT management roles across cloud environments — privileged access workstations (PAWs), just-in-time access, and phishing-resistant MFA should be mandatory for anyone with admin rights, not just the C-suite. Ensure security awareness and incident response training explicitly covers IT staff as high-value targets.
Original advisory: Ransomware gangs skip the CEO, head straight for the 40-something IT manager