It is all about incentives
This is a scary story. But the lesson is (yet again) our inability to understand what makes humans tick.
The Untold Story of NotPetya, the Most Devastating Cyberattack in History | WIRED
How Maersk was taken down by Russian malware, and how it recovered. The passage that got the attention is the bit about flying a domain controller backup in from Ghana (the only one that survived). The one that matters is that they were still running Windows 2000 on some servers and hadn’t carried out a proposed security revamp because it wasn’t in the IT managers’ KPIs and so wouldn’t help their bonuses. Link
Via Ben Evans