One click on the wrong link is enough to let a nasty ransomware code wreak havoc on your computer and encrypt your files by force. After that, you know the drill – it’s either pay up or forget about your data.
Technically speaking, ransomware is a type of malware that encrypts the user’s files and asks for a ransom. More often than not, there is a deadline attached to it, coupled with a threat to delete your data if you refuse. The preferred target is anyone willing to take the bait – businesses and individuals alike.
Not only are cyber-attacks on the rise, but the crooks behind them are also on the winning side of the battle. At one point, even BBC succumbed to a ransomware attack that came down to them shelling out $530,000 to get their data back. In Bitcoin, of course, as it makes it almost impossible to track down the recipient. But don’t make the mistake of thinking that only the big-name companies are interesting to them. Everyone is a potential target.
Protect Against a Ransomware Attack
There is no foolproof way to stay safe. But if you implement the following measures, you’re going to become a much tougher nut for them to crack:
- Update your software on a regular basis – It’s a cybersecurity essential that’s often neglected, but no less true. Moreover, an updated antivirus scanner tends to be more effective. It also helps you check for suspicious file changes and odd system behaviour such as massive encryption that appears out of the blue.
- Monitor your network – By monitoring your network traffic, you can detect when something is out of the ordinary. In some cases, it may be indicative of hackers breaching your security defences and a strong hint that you should act asap.
- Scan your emails – Hackers like to take advantage of the weakest link in your cybersecurity strategy – the human factor. Therefore, it’s crucial to scan and filter the emails before they reach your employees. It can stop various phishing and ransomware campaigns in their tracks.
- Have a response plan in place – What good is a sound business plan if you don’t have a solid answer for a ransomware attack? It shouldn’t only cover the technical aspect of cleaning up your system and restoring your data. Also, include the business aspect of communicating the incident to your loyal base of customers.
- Think twice before paying up – Have you been diligent enough and made regular backups? Then wiping your system and restoring files is a preferable course of action to paying the ransom. Cybercriminals are not in any way, shape, or form obligated to give you the decryption key anyway. Besides, there are ransomware decryption tools you can try first, with paying the ransom being the absolute last resort. At the same time make sure you have cyber security attack insurance in place.
- Actively work on protecting your data – As you must have figured by now, regular backups are one way to prevent the terrible consequences of ransomware. You should make multiple backups while you’re at it. It’s a good idea to store some of them offline, where no malware can reach it. But backups don’t stop cybercriminals from making stolen data public. Also, apply a level of encryption to data stored on the hard drives, clouds, or anywhere else.
- Realise that every device is a potential target – If your company uses IoT devices, these could be a potential attack vector. The more of them you have, the higher the risk. Once one of them gets infected, expect it to attempt to infect the others.
- Educate your staff – Invest in cyber security education of your employees so they can recognise a suspicious-looking email that contains ransomware. The basic principle is not opening emails from senders that you don’t know. The same goes for clicking on suspicious links inside of an email – don’t.
- Replace the default passwords – More often than not, IoT devices come with a default password that many don’t bother to change. It is like sending an open invitation for hackers to come in. So, don’t take the chance and replace them.
- Keep your systems up to date – As you can learn from the example of WannaCry, many computers running Windows XP were compromised due to the operating system being out of date. The lesson is, taking the time needed to update your systems is well worth the effort.
