Partner Article

Ransomware Hostage Situation

Backing Up Data Just Might Save You From A Ransomware Hostage Situation

Ransomware will continue to be a threat to businesses as long as cybercriminals know that they can infect devices by taking advantage of vulnerabilities.Ransomware is computer malware distributed by hackers, which is installed covertly on the victim’s device. This malware encrypts files on a system’s hard drive, making them inaccessible to users.

Attackers request payment to decrypt data and will only restore it once this ransom has been paid. Once a system has been infected by ransomware, there is no easy solution to restore data. Advanced malware can often prove impossible to reverse without the encryption key held by attackers. Prevention and mitigation techniques are therefore key to protecting your business and should be prioritised.

In this article, the experts at Syntax IT Support London provide their tips for protecting your business and being prepared for ransomware attacks.

Make regular backups

Maintaining data and system backups is good business practice and is a truly invaluable damage mitigation technique when it comes to ransomware. If you don’t have access to recent backups which remain uninfected after an attack, you will find yourself in a very uncertain position moving forward as systems may be impossible to recover.

Older versions of files should be available in case newer versions have been encrypted. Backups should also be stored in an offline environment where possible, as ransomware may attempt to encrypt data on connected network shares and removable drives where they otherwise may be stored. Applications can help you to automate the process of backing up data, so there’s really no excuse to not be protecting company assets in this way. Once backups have been made and you are sure that they have been stored securely, they should be tested to ensure that you can recover important data from them.

Use a layered security strategy

It is necessary to have good defences in place to protect against viruses, so that you are less likely to be affected by them from the start. A layered security strategy involves utilising a variety of technologies such as anti-virus software, web filtering and firewalls. Good security software often uses a combination of these technologies already, so it is easy to protect yourself if you are utilising the right tools.

Allow software updates

You should always patch and update software and let employees know that it is important for them to do the same with their own devices. Hackers can deliver ransomware by harnessing known vulnerabilities which stem from unpatched software such as Java and Adobe Flash Player. Software vendors roll out scheduled updates to remove vulnerabilities, but on occasion they may discover a critical vulnerability that needs to be patched quickly. Security and antivirus software should also be patched and updated consistently. Always accept recommendations to run updates and ensure that you check for new patches every so often to stay up to date and protected.

Filter executable files in emails

Cybercriminals often use executable files, or EXEs, to deliver malware via email. Messages are disguised as documents such as invoices or payrolls, which may be contained within a ZIP file. Some email providers and anti-virus software allow you to filter incoming messages by the extension of their attached files. You can set this so that emails containing executable files are blocked, minimising the risk of ransomware delivery.

Check user privileges

Managing user privileges is another way to protect your network against ransomware. Attackers can only access those resources which the infected user has access to, which is determined by their administrative privileges. Limiting user privileges can be helpful because this can prevent ransomware from encrypting data on network drives, shares and removable media where the most sensitive files are located. Users should only have access to these areas if they absolutely need to. User activity should be analysed to determine the privileges that individual users are given.

Ransomware is a particularly malicious form of malware and is a threat against which all businesses should ensure they are protected. The strategies listed here are easy to put in place and businesses should ensure that they do so right away to minimise risk.

This was posted in Bdaily's Members' News section by Glespynorson .