Any other sysadmins or IT managers also seeing a huge uptick in hacking attempts over the last few months? I’m not talking rando script kiddy shit or port scanners, but actual targeted efforts. Just in the last month we’ve had two targeted phishing attacks, one that was blocked by our web filter, but would take you to a phony OWA sign in page that copied our branding, the 2nd being similar however it was hosted on a specific url of a compromised personal training website. Then someone literally tried about 500 logins to our Remote Desktop gateway using a list of employee usernames going back over a decade— most not even employed anymore. Constant attack attempts at our various Wordpress hosted websites too looking for vulnerable or out of date plug-ins.
Shit is keeping me up late at night— these latest ransomware attacks look fucking deadly.