Ransomware is exactly what it sounds like! It is a type of malicious software that, once installed, blocks access to a computer system until a sum of money is paid. All businesses and individuals are at risk to a ransomware invasion. It can be introduced into your systems simply through clicking on a link or opening an encrypted file. And once introduced, the malware has access to all of your data. Therefore, protecting against ransomware is necessary. Here’s where to start.
Steps to Safeguard Your Systems
1. Use reputable endpoint protection and a firewall. If you have a reliable antivirus solution and a solid firewall, you are well protected against an attack. Make sure the company and software you choose is reliable and has a solid rating and reviews. Scan the software before executing to ensure it is safe, because there is fake antivirus software available.
2. Use a secure backup, backup regularly and test your backups. It’s all about backups! Have a reliable backup plan. Make sure your backups are not accessible via your network. Whether you have your backup server offsite, use colocation or a data center facility, ensure your backups include all critical data. Your backup should be run regularly – at least overnight if not more often. Make sure you fully test your backup solution multiple times per year. Ensure there is a disaster recovery plan in place in the event of a data breach or ransomware attack.
3. Use content scanning and filtering on your mail servers. Content scanning and filtering identifies spam based on the email content rather than IP address. It scans all incoming email for certain words or phrases and will flag or exclude emails containing those keywords.
4. Make sure all systems are up to date with relevant patches. Keep your applications and operating systems up to date. Download and install the latest patches and updates as soon as possible once they are available.
5. Do not share any personal information or pay a ransom to attackers. If you fall prey to a ransomware attack, paying off the ransom or giving in may seem like the quickest and easiest thing to do, but it is not advisable. Oftentimes, it will lead them to scam your organization again. The best thing you can do is report the crime and work with IT professionals to get your system rid of the ransomware. Make sure to turn off all other devices and disconnect the infected computer from the network. And always be sure to change all passwords on all devices for the entire network.
Are You Protected Against Ransomware?
Ransomware, and other cybersecurity threats, are not going away. They will only continue to increase. Follow the above steps and make sure you and your organization are as protected as possible against any threat.
SubRosa’s incident response team is ready to help. They leverage real-world expertise, industry-leading technology and extensive threat intelligence to analyze and respond to a multitude of incidents, including ransomware, regardless of your organization’s size.