Ransomware gangs skip the CEO, head straight for the 40-something IT manager
joebuckwilliams
71 points
39 comments
August 09, 2026
Related Discussions
Found 5 related stories in 92.6ms across 8,687 title embeddings via pgvector HNSW
- Teenager suspected of leading KillSec ransomware group jruohonen · 12 pts · October 04, 2026 · 56% similar
- An undercover Google analyst infiltrated a notorious supply-chain hacking gang joozio · 16 pts · September 20, 2026 · 47% similar
- Terabytes of credentials leaked in supply-chain attack RattlesnakeJake · 42 pts · August 13, 2026 · 47% similar
- 16-year-old found Microsoft bug, got admin access to 17.3T-row databases johnshades · 26 pts · September 30, 2026 · 47% similar
- White House taps security firms for offensive hack-back operations ilamont · 23 pts · August 13, 2026 · 46% similar
Discussion Highlights (4 comments)
theseanz
Hey! As a 46 year old I am offended by this - I am definitely not Gen X. We’re a weird X/Millenial hybrid I’ve seen referred to as Xennials. Also F ZScaler - we use this officially sanctioned MTM attack at work and all it does is make my job harder.
Lucasoato
Companies hope that training will protect them from cyber threats, while ignoring that their most vulnerable employees are the ones that lost the motivation to care about their job.
neilv
> Zscaler says they combine information from compromised systems with publicly available data to map reporting lines and identify the employees most likely to influence a company's response. And commercially-available data: enterprise salespeople, for example, can buy this intel from data brokers (directly, or with layered services catering to sales funnels specifically). It's another way that surveillance capitalism can be a national security threat against the US. You have countless US companies collectively mapping out people networks and assembling often intimate dossiers on individuals... and saving international organized crime and geopolitical adversaries a ton of work, which they might not have the resources to otherwise do.
stephbook
The article is unclear: Do they "attack" the GenX managers and encrypt their stuff, or do they simply contact GenX managers in order to get paid faster? In that case, the managers aren't "victims" and aren't "attacked", that would be the company..