Read about the NotPetya attack.

1. Where did NotPetya start, why was it launched, and how did the creator know it would work?

2. What type of attacker started the attack?

3. What type of assets were impacted by the attack?

4. How could your company have been prepared ahead of time to avoid being at risk for NotPetya?

5. Which security principle would have been most applicable to preparing for an attack like NotPetya? (Layering, Limiting, Diversity, Obscurity, Simplicity)

6. Is ransomware profitable and would you consider it as a job? Why or why not?