 |
| Protect Networks from Ransomware attack |
Ransomware is the fastest growing malware threat, targeting users of all
types from the home user to the corporate network. On average, more than
4,000 ransomware attacks have occurred daily since January 1, 2016. This is
a 300-percent increase over the approximately 1,000 attacks per day seen in
2015. There are very effective prevention and response actions that can
significantly mitigate the risk posed to your organization.
Ransomware targets home users, businesses, and government networks and can
lead to temporary or permanent loss of sensitive or proprietary
information, disruption to regular operations, financial losses incurred to restore
systems and files, and potential harm to an organization’s reputation.
Ransomware may direct a user to click on a link to pay a ransom; however,
the link may be malicious and could lead to additional malware infections.
Some ransomware variants display intimidating messages, such as:
“Your computer was used to visit websites with illegal content. To
unlock your computer, you must pay a $100 fine.”
“You only have 96 hours to submit the payment. If you do not send
money within provided time, all your files will be permanently
encrypted and no one will be able to recover them.”
Do you need to Protect Networks from Ransomware attack?
A commitment to cyber hygiene and best practices is critical to
protecting your networks. So, You need to have answers for some questions
you may want to ask of your organization to help prevent ransomware
attacks:
1. Backups:
-
Do we backup all critical information?
-
Are the backups stored offline?
-
Have we tested our ability to revert to backups during an incident?
2. Risk Analysis:
-
Have we conducted a cybersecurity risk analysis of the
organization?
3. Staff Training:
- Have we trained staff on cybersecurity best practices?
4. Vulnerability Patching:
-
Have we implemented appropriate patching of known system
vulnerabilities?
5. Application Whitelisting:
-
Do we allow only approved programs to run on our networks?
6. Incident Response:
-
Do we have an incident response plan and have we exercised it?
7. Business Continuity:
-
Are we able to sustain business operations without access to certain
systems?
- For how long?
- Have we tested this?
8. Penetration Testing:
-
Have we attempted to hack into our own systems to test the security of
our systems and our ability to defend against attacks?
