Skip to content

ESET Research: AceCryptor attacks on the rise, target Central Europe, Balkans, and Spain and using Rescoms tool

  • In the second half of 2023, ESET detected multiple AceCryptor campaigns using the Rescoms remote access tool (RAT) in European countries, mainly Poland, Bulgaria, Slovakia, Spain, and Serbia.
  • The threat actor behind these campaigns in some cases abused compromised accounts to send spam emails in order to make them look as credible as possible. 
  • The goal of the spam campaigns was to obtain credentials stored in browsers or email clients, which in case of a successful compromise would open possibilities for further attacks.

BRATISLAVA — March 20, 2024 — ESET Research has recorded a dramatic increase in AceCryptor attacks, with ESET detections tripling between the first and second halves of 2023, correlating to the protection of 42,000 ESET users worldwide. Furthermore, in recent months, ESET registered a significant change in how AceCryptor is used, namely that the attackers spreading Rescoms (also known as Remcos) started utilizing AceCryptor, which was not the case beforehand. Rescoms is a remote access tool (RAT) that is often used by threat actors for malicious purposes; AceCryptor is a cryptor-as-a-service that obfuscates malware to hinder its detection. Based on the behavior of deployed malware ESET researchers assume that the goal of these campaigns was to obtain email and browser credentials for further attacks against the targeted companies. The vast majority of AceCryptor-packed Rescoms RAT samples were used as an initial compromise vector in multiple spam campaigns targeting European countries, including Central Europe (Poland, Slovakia), the Balkans (Bulgaria, Serbia), and Spain.

“In these campaigns, AceCryptor was used to target multiple European countries, and to extract information or gain initial access to multiple companies. Malware in these attacks was distributed in spam emails, which were in some cases quite convincing; sometimes the spam was even sent from legitimate, but abused, email accounts,” says ESET researcher Jakub Kaloč, who discovered the latest AceCryptor with Rescoms campaign. “Because opening attachments from such emails can have severe consequences for you or your company, we advise you to be aware about what you are opening and use reliable endpoint security software able to detect this malware,” he adds.

In the first half of 2023, the countries most affected by malware packed by AceCryptor were Peru, Mexico, Egypt, and Türkiye, with Peru, at 4,700, having the greatest number of attacks. Rescoms spam campaigns changed these statistics dramatically in the second half of the year. AceCryptor-packed malware affected mostly European countries.

AceCryptor samples that we’ve observed in the second half of 2023 often contained two malware families as their payload: Rescoms and SmokeLoader. A spike detected in Ukraine was caused by SmokeLoader. On the other hand, in Poland, Slovakia, Bulgaria, and Serbia, increased activity was caused by AceCryptor containing Rescoms as a final payload.

All spam campaigns that targeted businesses in Poland had emails with very similar subject lines about B2B offers for the victim companies. To look as believable as possible, attackers did their research and used existing Polish company names and even existing employee/owner names and contact information when signing those emails. This was done so that in the case of a victim Googling the sender’s name, the search would be successful, which might lead to the victim opening the malicious attachment.

While it is unknown whether the credentials were gathered for the group that carried out these attacks or if those stolen credentials would be later sold on to other threat actors, it is certain that successful compromise opens the possibility for further attacks, especially for ransomware attacks.

In parallel with the campaigns in Poland, ESET telemetry also registered ongoing campaigns in Slovakia, Bulgaria, and Serbia. The only significant difference, of course, was that the language used in the spam emails was localized for those specific countries. Apart from the previously mentioned campaigns, Spain also experienced a surge of spam emails with Rescoms as the final payload.

For more technical information about the AceCryptor and Rescoms RAT campaign, check out the blogpost “Rescoms rides waves of AceCryptor spam”. Make sure to follow ESET Research on Twitter (today known as X) for the latest news from ESET Research.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

Keep control of your cloud journey

Over the past decade, there has been an undoubted shift towards companies adopting and efficiently managing their applications and data in the cloud. However, this rush towards the cloud has left many companies with more complexity within their IT environments and unexpected costs. In reality, most customers today are operating in a hybrid environment for a variety of reasons. We’ll take a look at a number of those reasons below.

Even those companies that rushed their customers to the cloud are now offering those same customers more options to take a step back from the cloud; including hybrid and on-premises options for their IT environments. However, these options come at a higher price to the customer.

At Parallels, we have always believed in offering choice and flexibility for customers, as they should be able to take their cloud journey at a pace that best suits their needs. Customers vary in their requirements for public cloud services. For some, it is a fundamental requirement to realize the benefits that public cloud services bring, such as agility and ever-green architecture. For others, it’s not a core part of their IT strategy at all, at least not today. There are many in between, as surveys continue to show.

Why hybrid cloud deployments?

The options for deploying your IT environment are diverse, ranging from on-premises, single-cloud and multi-cloud configurations and various combinations of these. In July 2023, the Parallels team conducted a survey aimed at gaining deeper insights into businesses’ choices of IT environments, the infrastructure types they employ, and the motivations driving these decisions.

Of the 805 IT professionals we surveyed, 64% were actively using a hybrid cloud approach within 2023. Of the respondents spanning North America and Europe, 38% intended to increase their hybrid approach throughout 2024. This suggests there is a clear understanding of the benefits of making use of both on-premises and cloud deployments. Within the same survey, 89% believed that the public cloud offers significant value for their business.

Furthermore, many of our respondents cited flexibility, security, and cost savings as their primary reasons for choosing the hybrid cloud over 100% public and 100% private clouds. Of this group, 49% chose the hybrid cloud because of increased flexibility, 46% for improved security, 45% for cost savings, 44% for increased reliability, and 40% for more scalability.

For businesses using a hybrid approach, flexibility is important because it offers them the time needed to navigate their cloud journey at their own pace.

The emphasis on security in choosing hybrid cloud solutions is understandable. With cyberattacks on the rise, security concerns weigh heavily on IT leaders, causing significant worry. Sensitive data or information subject to regulations is best-kept on-premises rather than in the cloud, reflecting a cautious approach.

Cost considerations also drive organizations toward hybrid cloud solutions. While cloud adoption promises lower initial costs by eliminating the need for physical infrastructure like data centers, long-term operating expenses (OpEx) must be carefully evaluated.

The study also explored the primary cost benefits expected from a hybrid approach. Among participants, 31% noted that a hybrid strategy helps manage expenses associated with transitioning to the cloud by implementing the shift gradually.

Based on the findings from this survey, it’s clear that the value of the cloud is almost unanimous, offering near-instant access to key resources and the ability to scale up or down depending on the business needs. However, it’s clear that many IT organizations also intend to retain an on-premises environment to combat concerns with data security and cost predictability. Furthermore, the hybrid model offers many businesses flexibility in when and how they transition to the cloud.

A gold rush…to the cloud

Several years back, a plethora of companies advocated for a significant shift among businesses, urging them to abandon their VDI and on-premises setups in favor of embracing a cloud-first strategy. The rationale behind this push was that these advocating companies stood to gain the most from such a transition. By leveraging the vast array of cloud resources and enjoying the flexibility of accessing cutting-edge technologies, businesses were promised a multitude of benefits. However, for many, this migration came at a hefty cost.

Citrix was a keen advocate of this move as well as Microsoft and Amazon Web Services. These companies made significant investments in products and solutions to support businesses moving to the cloud and had reason to encourage them to completely move to a public cloud model.

Many businesses that eagerly embraced the call for a cloud-first approach found themselves grappling with unexpected challenges. The transition unfolded at a pace that often outpaced their accustomed rate of change, causing significant struggles. Some of the hurdles these businesses faced in the transition to a cloud-first approach included effectively managing IT costs, skills, and the organizational culture changes that came with it.

Additionally, some businesses hesitated to fully commit to a single delivery model, recognizing the potential drawbacks of locking themselves into one approach. Nevertheless, they still felt pressured to follow the prevailing trend towards cloud adoption.

The cost of moving at a pace different from your own

Moving towards a public cloud approach at a speed that is not befitting to your competencies can have a significant impact on the performance of your business. Here are some concerns to be aware of:

Costs

Embracing the public cloud is often seen as the most financially savvy approach to establishing an IT infrastructure, as it eliminates the need for substantial upfront capital expenditures on hardware such as servers. Instead, it necessitates only lightweight client and endpoint devices to access applications and data from the cloud.

However, over time, the costs associated with configuring, deploying, and managing public cloud instances can escalate compared to the predictable costs of owning and managing servers over a 5–10-year lifecycle. These costs are contingent upon usage, and any usage spikes result in additional expenses. Furthermore, price increases contribute to additional costs. Without meticulous management, automation, and analytics, businesses may find themselves paying for resources that remain underutilized.

Skill shortage

Skill shortage emerges as a critical, albeit potentially short-term, concern for numerous businesses transitioning entirely to the public cloud. This shortage often stems from hasty migrations undertaken without adequate preparation. Shifting applications and data across platforms essentially entails a full reset, introducing new processes, software, and systems that demand a heightened level of understanding. This understanding can only be cultivated through extensive training of existing staff.

In instances where businesses rush their migration to the cloud, the existing team may not have sufficient time to undergo training and formulate a comprehensive migration plan. Consequently, companies may resort to recruiting individuals with the requisite skills to expedite the migration process, albeit at inflated costs.

While this skill shortage may self-correct over the next five years, it remains a critical consideration in the present landscape. Organizations must carefully assess their readiness for cloud migration, ensuring adequate preparation and resource allocation to mitigate the impact of skill shortages on their transition to the public cloud.

Limited control

The public cloud serves to relieve businesses from the burden of configuring and maintaining the infrastructure needed for a virtualized IT environment. However, this transfer of responsibility can lead to a loss of control. Public cloud services often provide standardized configurations and services, which may not fully align with your specific needs. This limitation can hamper your ability to customize the environment to suit your exact requirements and may result in reduced visibility into the underlying infrastructure supporting your applications and data. Consequently, troubleshooting issues, optimizing performance and ensuring compliance with internal policies or regulatory requirements may become more challenging.

Additionally, despite public cloud providers typically offering high availability and reliability, service disruptions can still occur due to factors beyond your control, such as outages or maintenance activities. These disruptions may limit your ability to mitigate their impact on your IT operations.

Vendor lock-in

Transitioning to the public cloud can lead to vendor lock-in, where your applications and data become closely tied to specific cloud provider services or technologies. This entanglement can complicate and raise the cost of switching providers later on, exacerbating the limitations on your control over your IT environment.

Moreover, migrating to the public cloud means relying on the cloud provider for many facets of your IT infrastructure, such as hardware provisioning, network configuration, and software updates. This dependency diminishes your direct control over these crucial components.

Back peddling from cloud to on-premises

Even companies that initially encouraged the move to the wholesale cloud have started to recognize this was not the best course of action for many customers or that these customers want more flexibility in their own cloud journey.

Hyper-Converged Infrastructure (HCI)

Hyper-Converged Infrastructure (HCI) is a software-defined IT infrastructure framework that integrates compute, storage, networking, and virtualization resources into a single, unified system. In traditional data center architectures, these components are often managed separately, leading to complexity and inefficiency.

Leading companies like Nutanix and Scale Computing have been offering this type of framework to customers for many years, which in essence, offers the advantages of a cloud model but within your own data center. This integrated approach not only simplifies infrastructure management but also provides scalability and agility, helping organizations meet their evolving IT needs with ease.

Microsoft is now following this type of framework with its own HCI offering, which hosts Windows and Linux VMs or containerized workloads and their storage. It’s a hybrid product that connects the on-premises system to Azure for cloud-based services, monitoring, and management. Microsoft Azure Stack HCI offers the security of an on-premises server located within your company’s office walls but is managed through the Azure subscription and based on virtualization principles.

The key difference here is that the business is not purchasing the initial hardware. Microsoft is providing it as part of the service at a monthly cost, which includes the flexibility of both cloud and on-premises, loaning of hardware and cloud resources, and the management and analytics of the environment.

Universal licensing

Another example is Citrix and its Universal Licensing model. Before the introduction of Universal Licensing, Citrix offered two main pathways for delivering its digital workspace solutions. Firstly, customers could opt for Citrix Virtual Apps and Desktops (CVAD) to run on virtual resources in a location of their choice, traditionally purchased as a perpetual license with annual maintenance, but now available solely through a subscription model for new customers.

Furthermore, customers seeking the flexibility to operate across both public cloud and on-premises environments require Universal Licenses. This newfound flexibility, however, comes at a higher cost for customers and depends on the size of the organization. Therefore, limiting this option to organizations with more than 250 user licenses and to those customers wanting to stay away from the more costly Universal Licensing model and remain on their existing afraid cannot. Learn more in our blog post that asks: “Does Citrix Universal Licensing provide simplicity — or not?”

Many leading cloud-centric companies are acknowledging the importance of allowing customers to transition to the cloud at their own speed, with hybrid solutions emerging as a valuable option for many on this migration journey. However, these companies have also effectively leveraged this gradual transition and customer preference for hybrid environments to develop more profitable business models for themselves. So, what is the solution? Find out how Parallels® RAS can help.

Parallels RAS: A simplified hybrid deployment for app and desktop delivery

Parallels RAS has always offered a universally licensed approach, with a simple subscription model eliminating complexity for businesses. Parallels RAS grants access to all features, including secure gateway access, across various deployment options such as on-premises, public cloud, or hybrid environments.

This flexibility extends to optimized Azure Virtual Desktop (AVD), VDI desktops in the public cloud or data center, and remote access to physical workstations. Parallels RAS emphasizes avoiding vendor lock-in, prioritizing customer choice, and maintaining simplicity in its offerings.

With a focus on meeting customer needs, Parallels RAS continues to deliver on its promise of simplicity, empowering users to consume resources where they are most effective. Consider evaluating your current or potential virtual apps and desktops vendor to ensure alignment with your requirements and preferences.

Making your move to the cloud

A scenario for many customers could involve retaining the current on-premises infrastructure while transitioning away from Citrix to Parallels RAS or adopting a hybrid model. Many organizations have said it is easier to migrate to Parallels RAS rather than moving to the next version of Citrix. With this approach, organizations can utilize Parallels RAS to manage Azure Virtual Desktop (AVD) deployments alongside their existing on-premises systems. This strategy offers the flexibility to carefully plan and execute change management strategies at a pace that suits the organization’s needs.

It allows for thorough testing and gradual migration of specific workloads or departments to the cloud while maintaining stability and continuity with the on-premises infrastructure. This method enables organizations to leverage the benefits of cloud technology while mitigating risks and ensuring a smooth transition for users and IT operations.

Final words

The cloud presents tangible benefits that many companies can swiftly access. An on-premises infrastructure remains essential for providing security and cost predictability to businesses. By embracing a hybrid approach, companies can leverage the strengths of both environments. Contrary to common belief, achieving a hybrid deployment doesn’t necessitate an increase in costs; instead, it allows organizations to tailor their cloud journey according to their unique pace and requirements.

Parallels champions choice and flexibility through its universally licensed Parallels RAS, empowering organizations to seamlessly manage virtual desktop deployments across on-premises, public cloud, or hybrid environments. This approach ensures a gradual transition to the cloud while preserving stability and control over IT operations.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Parallels 
Parallels® is a global leader in cross-platform solutions, enabling businesses and individuals to access and use the applications and files they need on any device or operating system. Parallels helps customers leverage the best technology available, whether it’s Windows, Linux, macOS, iOS, Android or the cloud.

World Backup Day for MSPs & IT Providers

World Backup Day serves as a timely reminder to review your backup strategies and to educate your end users and partners on the importance of data backup. 

While World Backup Day is observed annually on March 31st, MSPs and IT providers play a critical role in protecting businesses and organisations every day of the year.

History of World Backup Day

World Backup Day was created in 2011 and started with a post on Reddit where a user wrote about losing their hard drive and wished someone had reminded them about how important it is to backup data. World Backup Day highlights the importance of securing and protecting data.

Why is data backup important?

In today’s digital age, data backup and data protection is critical for businesses and organisation to help protect against:

  • Ransomware
  • Cybersecurity attacks
  • Human error
  • Data loss
  • Hardware malfunction
  • Power failure
  • Natural disasters

Having a robust backup solution and solid restore process will help safeguard against these threats and help minimize downtime for your end users and clients.

Reminders for World Backup Day

Here are some top tips:

  • Review your backup strategy and solutions for different data types, backup types, storage solutions and destinations
  • Regularly test your backup and restore processes
  • Check backup schedules to confirm they are running as intended
  • Automate and streamline processes to save time such as email reports and job log alerts
  • Make sure your servers and databases are backed up, not just your endpoints

Comet Backup for MSPs, IT Providers & Businesses

A secure and reliable backup platform is essential to MSPs & IT Providers’ backup and disaster recovery (BDR) strategy to maintain business continuity in the event of a security incident.

Here are some of the core features & benefits of Comet Backup:

  • Easy to use: Comet Backup has an intuitive, easy-to-use web console where you can remotely manage and protect devices. Comet is fast and easy to set up – start running backups and restores in less than 15 minutes.
  • Flexible: Choose Comet Storage powered by Wasabi for an all-in-one storage solution, or utilize your own storage, whether that’s an on-prem solution or a S3 compatible storage provider (including AWS, Backblaze, Wasabi, Azure, and more). You’re in control of where your data sits.
  • Fast, efficient chunking technology: Advanced backup algorithm packages data into small blocks for faster uploads and downloads, saving valuable time.
  • Reliable, Safe & Secure: Data is encrypted during backup, transit, and rest. Comet is also HIPPA and GDPR compliant.
  • Client-side deduplication: Reduces redundant data, ensuring more efficient storage usage and therefore cost savings.
  • Incremental forever without full re-uploads: After the initial backup, only changes are uploaded, conserving bandwidth, and accelerating the backup process.
  • Compression and encryption: Client data is compact for storage efficiency and secured against breaches, ensuring peace of mind.

Protect your data this World Backup Day

World Backup Day is a great time to educate and remind your end users and partners of the importance of data backup. Your goal as IT Providers and MSPs is to provide the best support and solutions to give your partners peace of mind and confidence that their businesses’ data is safe and protected.

Test drive Comet Backup with a 30-day FREE trial, or book a discovery call with our team to learn more about how Comet can help your business.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Comet
We are a team of dedicated professionals committed to developing reliable and secure backup solutions for MSP’s, Businesses and IT professionals. With over 10 years of experience in the industry, we understand the importance of having a reliable backup solution in place to protect your valuable data. That’s why we’ve developed a comprehensive suite of backup solutions that are easy to use, scalable and highly secure.

The NIS2 Directive & Its Impact on Cybersecurity Across the E.U.

In response to an endless barrage of cyber-attacks targeting private, public and state-sponsored organizations across the European Union (E.U.), there has been a call to widen the scope of risk management requirements and to increase accountability with regards to security supervisory measures. As such, the E.U. has taken a decisive step forward with the introduction of the NIS2 Directive. This directive, which seeks to supersede its predecessor (NIS), aims to fortify the cybersecurity posture of organizations across the continent, ensuring that the digital infrastructure remains resilient against a backdrop of evolving threats. The NIS2 Directive aims to strengthen the security requirements, address the security of supply chains, streamline reporting obligations, and introduce more stringent supervisory measures and stricter enforcement. As we navigate through this comprehensive guideline, let’s delve into the essence of NIS2, its enforcement mechanisms, and what it signifies for organizations striving for excellence in cybersecurity.

Unveiling the NIS2 Directive: A Beacon of Cyber Resilience

The NIS2 Directive emerges as a landmark legislative endeavor by the European Union, setting a new horizon for cybersecurity norms across its member states. Recognizing the pivotal role of digital infrastructure in the contemporary socio-economic landscape, this directive not only aims to rectify the vulnerabilities identified in its predecessor but also endeavors to architect a robust cybersecurity framework capable of withstanding the ever-evolving cyber threats. By mandating an elevated baseline of security measures, NIS2 embodies the EU’s commitment to safeguarding its digital ecosystem against the backdrop of increasing cyber adversities.

This legislative framework is distinguished by its ambitious scope, encapsulating a diverse spectrum of sectors deemed critical for the EU’s functionality and prosperity. From energy and transport to banking and healthcare, NIS2 acknowledges the interconnected nature of these sectors and the paramount importance of their security in ensuring the seamless operation of the Union’s digital and physical infrastructure. It’s this comprehensive inclusivity that marks a significant advancement from its predecessor, aiming to weave a tighter security net across the EU’s vast digital landscape.

Moreover, NIS2 accentuates the imperative of stringent compliance, embedding enhanced obligations for entities within its purview. These include the adoption of advanced risk management protocols, the establishment of incident reporting mechanisms, and the implementation of cutting-edge cybersecurity measures. Through these provisions, NIS2 propels organizations towards not merely reacting to cyber incidents but fostering a proactive culture of cyber resilience, thereby elevating the cybersecurity stature of the European Union to new heights.

The Expanded Scope and Enhanced Obligations Under NIS2

The inception of the NIS2 Directive ushers in an era of elevated cybersecurity expectations, broadening its dominion to envelop an array of critical sectors and digital service providers. This strategic expansion reflects the European Union’s acute awareness of the ubiquitous nature of cyber threats and underscores a resolute commitment to fortifying every facet of its digital and physical infrastructures. The proposed expansion of the scope covered by NIS2 would effectively oblige more entities and sectors to take measures. The directive’s enhanced scope is not merely a quantitative increase but a qualitative leap forward, embodying a holistic approach to cybersecurity that acknowledges the intricate interdependencies within the EU’s socio-economic ecosystem.

With this expansion comes a suite of augmented obligations that entities must embrace. NIS2 mandates the implementation of rigorous risk management protocols, establishing a framework wherein proactive measures are not just encouraged but required. The essence of these obligations lies in their potential to transform reactive security postures into dynamic, anticipatory defenses, capable of not just withstanding but preempting cyber threats. This paradigm shift necessitates a comprehensive reevaluation of existing cybersecurity practices, pushing organizations to adopt not only advanced technologies but also to cultivate a culture of perpetual vigilance and resilience.

Incident reporting protocols, another cornerstone of the directive, serve a dual purpose: they ensure timely and effective responses to cyber incidents while fostering a climate of transparency and cooperation among EU members. This collective approach to cybersecurity is emblematic of the NIS2 Directive’s vision—a vision where collaborative effort and shared responsibility pave the way towards a secure and resilient digital Europe.

Enforcement Mechanisms and the Role of National Authorities

The NIS2 Directive’s ambitions for a cyber-resilient Europe are bolstered by a comprehensive enforcement framework, meticulously designed to ensure unwavering adherence to its mandates. At the heart of this framework stand the National Authorities, designated as the vanguards of implementation and compliance within their territories. These authorities are vested with the power to enact a wide array of enforcement actions, signifying the European Union’s resolute stance on cybersecurity discipline.

Empowered to conduct thorough audits, these entities delve into the operational intricacies of organizations, assessing their compliance with the NIS2’s stringent requirements. Their purview extends beyond mere evaluation; they are authorized to request detailed information, compelling entities to demonstrate their commitment to cybersecurity resilience through tangible evidence. This level of scrutiny underscores the directive’s focus on transparency and accountability, ensuring that organizations are not just compliant in theory but in practice as well.

Should discrepancies or lapses in compliance be uncovered, National Authorities are equipped to impose penalties that reflect the severity of the infraction. Non-compliance with the NIS2 Directive can result in significant financial penalties. This enforcement mechanism serves a dual purpose: it acts as a deterrent against non-compliance and motivates entities to proactively bolster their cybersecurity measures. The clear message sent by this rigorous approach is that the European Union will tolerate no compromise on the security of its digital landscape. Through this dynamic interplay between National Authorities and organizations, the NIS2 Directive is transforming the fabric of cybersecurity across the continent, fostering an environment where resilience is not just encouraged, but mandated.

nis2 directive portnox

The Implications of NIS2 for Cybersecurity Product Selection and Budget Optimization

In light of the NIS2 Directive’s rigorous mandates, the landscape of cybersecurity product selection and budget management is undergoing a pivotal transformation. The directive’s comprehensive security requirements compel organizations to critically assess and elevate their cybersecurity toolkits. This shift necessitates a strategic alignment of cybersecurity solutions with the NIS2 standards, underscoring the importance of integrating advanced technologies and scalable solutions that not only bolster cyber defenses but also ensure seamless compliance.

The value of the EU cybersecurity market is estimated at more than €130 billion. The directive champions a proactive stance on cybersecurity, thereby influencing organizations to prioritize investments in solutions that offer not just immediate protection but long-term adaptability to the evolving cyber threat landscape. This includes leveraging automation and artificial intelligence to enhance threat detection and response, as well as adopting cloud-based services that provide flexibility and scalability. As a consequence, budget allocation strategies must evolve to accommodate these sophisticated solutions, balancing the need for compliance with the imperative to remain vigilant against future cyber threats.

Moreover, the selection of cybersecurity products must be guided by a holistic understanding of the organization’s unique risk profile and operational requirements. This approach ensures that investments are not only NIS2-compliant but are also efficacious in addressing specific vulnerabilities and enhancing the overall security posture. In essence, the NIS2 Directive serves as a catalyst for organizations to reevaluate and optimize their cybersecurity budget, encouraging a strategic investment in technologies that drive not only compliance but also comprehensive cyber resilience.

The Role of Visionary Leadership in NIS2 Compliance

In the landscape shaped by the NIS2 Directive, the mantle of leadership carries with it an imperative to see beyond the horizon of current cybersecurity challenges. Visionary leaders stand at the vanguard of this new era, charged not only with navigating the complexities of compliance but also with cultivating an organizational ethos that prioritizes resilience and adaptability in the face of cyber threats. It is a role that transcends traditional expectations, demanding a forward-thinking approach that integrates strategic foresight with actionable intelligence.

The essence of visionary leadership in the context of NIS2 compliance lies in the ability to harness the collective strength and ingenuity of an organization. It involves championing the cause of cybersecurity across all echelons, advocating for the resources and technologies that align with the directive’s rigorous standards. It means inspiring a culture where every member understands their role in safeguarding the digital domain, fostering an environment where proactive security measures are ingrained in the fabric of daily operations.

Furthermore, visionary leaders recognize the value of cross-functional collaboration as a cornerstone of effective cybersecurity strategy. They seek to break down silos, fostering an integrated approach that leverages diverse perspectives and expertise in pursuit of a common goal: a resilient and secure digital infrastructure. Through their guidance, organizations are poised not only to meet the mandates of the NIS2 Directive but to set a standard for cybersecurity excellence that resonates throughout the European Union and beyond.

In this evolving digital landscape, the role of visionary leadership is not just to comply but to inspire, transforming the challenges posed by NIS2 into opportunities for innovation, growth, and enduring cyber resilience.

The NIS2 Directive as a Catalyst for Transformative Change

The NIS2 Directive heralds a significant shift in the European Union’s approach to cybersecurity, marking a pivotal moment in the collective endeavor to shield our digital ecosystem from the ever-present shadow of cyber threats. Its enactment is not merely a regulatory adjustment but a profound call to action, urging organizations across the EU to elevate their cybersecurity protocols, refine their strategic priorities, and fundamentally transform their operational ethos towards enhanced digital resilience.

This transformative framework demands more than mere compliance; it invites entities to reimagine their cybersecurity landscapes, integrating cutting-edge technologies and forward-thinking practices that extend beyond the immediacy of threat mitigation. It underscores the imperative for a holistic, anticipatory approach to cyber defense, emphasizing the necessity of strategic foresight and adaptability in an era characterized by rapid technological evolution and increasingly sophisticated cyber adversaries.

As organizations navigate this new directive, the impetus to innovate, to cultivate robust cyber resilience, becomes a defining challenge—and opportunity. The journey toward NIS2 compliance catalyzes a comprehensive reassessment of cybersecurity postures, propelling entities to not only fortify their defenses but also to champion a culture of continuous improvement and collaborative vigilance.

In essence, the NIS2 Directive serves as a formidable lever for transformative change, shaping a future in which the European Union stands as a paragon of cyber resilience. It is a future where the collective commitment to cybersecurity transcends regulatory compliance, embedding itself in the very DNA of organizational strategy and culture, forging a path toward a secure, resilient digital Europe for generations to come.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Portnox
Portnox provides simple-to-deploy, operate and maintain network access control, security and visibility solutions. Portnox software can be deployed on-premises, as a cloud-delivered service, or in hybrid mode. It is agentless and vendor-agnostic, allowing organizations to maximize their existing network and cybersecurity investments. Hundreds of enterprises around the world rely on Portnox for network visibility, cybersecurity policy enforcement and regulatory compliance. The company has been recognized for its innovations by Info Security Products Guide, Cyber Security Excellence Awards, IoT Innovator Awards, Computing Security Awards, Best of Interop ITX and Cyber Defense Magazine. Portnox has offices in the U.S., Europe and Asia. For information visit http://www.portnox.com, and follow us on Twitter and LinkedIn.。

Scale Computing Announces 2024 Scale Computing Platform Summit Awards Finalists

INDIANAPOLIS – March 19, 2024 — Scale Computing, a market leader in edge computing, virtualization, and hyperconverged solutions, today announced finalists for the 2024 Scale Computing Platform Summit Awards. Winners will be announced at the Scale Computing Platform Summit (Platform//2024), held April 16-18, 2024 at Resorts World Las Vegas. The second annual event is open to all Scale Computing customers, partners, and technology alliances.

The Scale Computing Platform Summit Awards recognize transformational leadership among Scale Computing Partners, Customers, and Technology Alliances. Finalists were placed into award categories based on demonstrated excellence in three key areas: innovation, collaboration, and growth.

A new category being introduced at the Scale Computing Platform 2024 is the “Customer Heroes Advocating Market Performance” CHAMP award. These Scale Computing customers partner with Scale Computing to share their SC//Platform use cases and success stories with the market at large. These Scale Computing CHAMP advocates leverage their collaboration with Scale Computing and its innovative technology to achieve results more accessible and faster, even when local IT resources are scarce. Scale Computing CHAMPS helps lead their organization to success by guaranteeing their IT infrastructure is highly reliable and available.

The 2024 Platform Summit Awards finalists include:

Partner Awards

Outstanding Partner Momentum Award

  • Five Star Technology Solutions
  • RMON Networks
  • Clear Sky Tech
  • Natrix Technologies
  • Mobius
  • Tarsus Distribution

Edge Pioneer Partner Of The Year

  • X10 Technologies
  • ePlus

Scale Computing Partner Of The Year – Domestic

  • KT Connections
  • Link Computer Corporation
  • EOS Systems
  • CDW
  • Elevity
  • Turn Key Solutions
  • AmeriTech Pro

Scale Computing Partner Of The Year – International

  • X10 Technologies – Philippines
  • Boston Server & Storage Solutions GmbH
  • Servix Informatica
  • ET Works
  • Digitec ICT Ltd.
  • Belvoir Valley Solutions Limited

Distribution Partner Of The Year – Domestic

  • Climb Channel Solutions
  • Ingram Micro

Distribution Partner Of The Year – International

  • Synetcom Philippines
  • Titan Data Solutions Limited
  • Portland Europe
  • Africa Plus Distribution Direct

MVP Sales

  • Greg Simmons, Five Star Technology Solutions
  • William Edwards, International Data Link
  • Scott Armitage, New Cyber Source
  • Dan Guelich, Link Computer Corporation
  • Eric Rivest, Natrix
  • Jon Moore, ET Works
  • Cali Manding, X10 Technologies – Philippines
  • Wolfgang Zugarav, Boston

MVP Technical

  • Matt Gaudu, International Data Link
  • Ryan Fackey, ProSource
  • Don Junker, Tiber Creek Consulting
  • David Van Remortel, CONNEX
  • Josh Moore, Elevity
  • Gary Beck, Beck Computer Systems
  • Mike Ross, Holistec
  • Lyndon Villas, Synetcom

MSP Leadership

  • KT Connections
  • PCS, Inc.
  • RBS Managed IT Services
  • Elevity
  • 365IT (UPONSCALE)
  • Enchacloud

Customer Awards

IT Leadership In Edge

  • In-N-Out Burger
  • Harrison Steel Castings Co.
  • Seaspan Ship Management
  • Delhaize

IT Leadership In Data Center

  • Central Bancorp
  • Central Florida Electric Cooperative Inc.
  • City of Woodstock
  • CKenergy Electric Cooperative
  • Community Health Connections
  • Elder Outreach Administrative Solutions
  • Infinity Natural Resources
  • Lakeland School Corporation
  • Lithion Battery, Inc.
  • Machen McChesney
  • Martell Sales and Service
  • PB2 Architects
  • Rhode Island Credit Union
  • State Bank of Southern Utah
  • Thompson IG
  • Town of Kennebunk
  • Virginia Tech

Scale Computing Champions

  • Anthony Horzempa, Senior Project Analyst, Syracuse University
  • Shane Rogers, IT Director, The Harrison Steel Castings Co.
  • Tim Bramham, Director of Technology, Kingston Police
  • Wally Wheadon, Director, IT Infrastructure, Ventura Foods
  • Kevin Moreland, Department of Information Technology, Summit County Board of Elections
  • John Stuplich, System Admin, Kolbe Windows & Doors

Technology Alliance Awards

Scale Computing added three new awards to honor its Technology Alliances this year. Those awards include:

Tech Leadership Award: Acknowledging the sponsor who has shown exemplary leadership and vision in the tech industry. Nominees include:

  • Opentext
  • Acronis
  • Mako Networks
  • Lenovo
  • Simply NUC
  • Eaton

Marketing Innovator Award: Honoring the sponsor who has demonstrated creativity and effectiveness in utilizing meet-in-channel strategies to drive business growth and engagement with partners. Nominees include:

  • Simply NUC
  • Eaton
  • Mako Networks
  • Lenovo

Partnership Excellence Award: Celebrating the sponsor who has formed outstanding partnerships and collaborations within the tech and partner community. Nominees include:

  • Eaton
  • Mako Networks
  • Lenovo
  • Simply NUC
  • Dell

Platform//2024 is an immersive three-day event featuring educational sessions, thought leadership panels, Scale Computing company updates and insights, advanced training opportunities, and ample networking. Discussions will explore the latest advancements in virtualization technology, edge computing, hybrid cloud, AI, automation, data security, and more. This year’s program includes a speaker lineup of technology leaders from key Scale Computing customers and partners who will offer expert insights around their direct experience with Scale Computing, including use cases and benefits of the infrastructure technology. Speakers include:

  • Jonny Smith — CEO, SimplyNUC
  • Flavio Bonomi — Digital Transformation Executive & Solutions Architect, Accenture
  • Brian Chambers — Chief Architect, Chamber of Secrets
  • Andy Brauer — CTO, Encha Cloud
  • Tim Bramham — Director of IT, Kingston Police
  • Simon Gamble — President and Co-Founder, Mako Networks
  • Steven Henshaw — Senior R&D Engineer, Large Fast Casual Restaurant Chain
  • Anthony Horzempa — Senior Project Analyst, Syracuse University
  • Frédéric Masson — CEO, UPONSCALE and 365IT
  • John Stuplich — System Administrator, Kolbe Windows and Doors

“At Scale Computing, the spirit of innovation, collaboration, and growth permeates everything we do, fueling both our internal culture and our partnerships,” said Jeff Ready, CEO and co-founder of Scale Computing. “The Platform Summit Awards finalists embody these values by consistently pushing boundaries and driving positive outcomes for their organizations. We’re thrilled to recognize and celebrate their achievements in Las Vegas this year. Platform Summit is more than a conference; it’s a catalyst for knowledge sharing, connection, and collective advancement. We look forward to welcoming and celebrating our community of customers, partners, and technology alliances at this year’s event.”

To learn more about the conference and to register for Platform//2024, please visit the Scale Computing Platform Summit event website.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Scale Computing 
Scale Computing is a leader in edge computing, virtualization, and hyperconverged solutions. Scale Computing HC3 software eliminates the need for traditional virtualization software, disaster recovery software, servers, and shared storage, replacing these with a fully integrated, highly available system for running applications. Using patented HyperCore™ technology, the HC3 self-healing platform automatically identifies, mitigates, and corrects infrastructure problems in real-time, enabling applications to achieve maximum uptime. When ease-of-use, high availability, and TCO matter, Scale Computing HC3 is the ideal infrastructure platform. Read what our customers have to say on Gartner Peer Insights, Spiceworks, TechValidate and TrustRadius.

Need help? Our team is just a message away