Ransomware is a form of malware that infects victims’ computers, encrypts their content, and issues a demand that the victim pay a ransom to the attacker to regain access to their content. Most ransomware attacks are based on email delivered computer Trojans, which rely on tricking a victim to install the malware. Attackers use social engineering methods to coerce their intended victims to expose themselves to ransomware, often impersonating a trusted contact to entice the victim to act, e.g., opening an attachment. Ransomware attacks have been steadily rising, with criminals targeting specific industries, such as banks, hospitals, etc.
Trustcom approach to ransomware prevention and risk avoidance.
- Antivirus software is essential, but it must be reinforced with an effective ransomware strategy and employee education around cyber security threats.
- If your business is serious about reducing the risk of ransomware you should consider training members of your IT team in cyber security. There are dozens of ways to train to survive a ransomware attack.
- Regularly backing-up your systems and data is also crucial, and this will allow you to recover your data from a previous state. However, the encrypted data will remain unrecoverable. Paying up is not recommended, but some companies do pay the criminals. However, even businesses that do pay-up are not guaranteed to regain access. You’ll also be funding a criminal enterprise and the attackers could simply attack your business again. Honor amongst thieves? Think again.
If you’re struck by ransomware, shut down your systems to prevent it spreading, then restore from backup if possible. Some security firms advise not destroying ransomed data because new tools may be built later to decrypt these files.