Calling on all Cisco Partners! Join us for a hands-on cybersecurity lab where you'll explore the use Cisco Security to strengthen your organization's security posture. In this session, you'll delve into the threat landscape dominated by Wizard Spider, a notorious Russia-based, financially motivated threat group. Known for deploying TrickBot since 2016, Wizard Spider has launched ransomware campaigns impacting a wide range of organizations, from major corporations to healthcare facilities.

Ransom Costs and Victims

Wizard Spider is notorious for its high ransom demands, often exceeding several million dollars per incident. A recent report indicates that their ransom demands can reach between $1 million to $10 million, depending on the size and sensitivity of the targeted organization. Some notable organizations that have fallen victim to Wizard Spider's ransomware attacks include:

  • CNA Financial: The company reportedly paid a ransom of $40 million to regain access to its systems after a significant breach in 2021.

  • JBS Foods: This major meat processing company paid approximately $11 million in ransom following a ransomware attack attributed to Wizard Spider in 2021.

  • Kaseya: In 2021, Kaseya was attacked, affecting thousands of businesses globally, with ransoms potentially totaling over $70 million across various victims

Understanding Wizard Spider's Tactics

Enhance your understanding of Wizard Spider's Tactics, Techniques, and Procedures (TTPs) and explore whether these tactics have been used against the lab environment. This is your chance to develop your cybersecurity skills and protect your infrastructure from sophisticated threats.

You'll gain practical experience with:

  • Cisco XDR

  • Cisco Secure Endpoint

  • Cisco Email Threat Defense

  • Cisco Secure Cloud Analytics

This lab will provide you with insights into defending against such advanced threats with Cisco Security and will help you build a robust security strategy tailored to your organization’s needs.

We are no longer accepting registration for this event

Rapid Incident Response vs Ransomware APTs

Event Information
Event Date 03-11-2025 10:00 am
Event End Date 03-11-2025 2:00 pm
Cut Off Date 03-14-2025 11:00 pm
Capacity 40
Registered 13
Available Place 27
Created By Gosha Maruhenko
Geolocation: amer
Type of event: sales
Location Virtual