Ransomeware protection rests on user education, good business practice, others- Vuuren
The world has being alarmed in recent times with the outburst of hackers laying siege by infecting computers of individuals and organisations around the globe with ransomware.
Drew van Vuuren, Data Protection Officer, ESET South Africa says that “ransomware is a very real threat to businesses and individuals alike, and when it comes to online security, it is arguably the most damaging threat. Yet, many people still don’t know what ransomware is, even though this type of cyber threat has been aggressively spreading over the internet, with results that can impact both financially as well as reputation ally – and the threat is only going to get more hostile.
“Ransomware is a malware that infects a computer and encrypts all its files. Cybercriminals then offer an ultimatum to their victim: pay the demanded ransom or lose your data forever. If you are susceptible and become a target you have no choice, either you pay or rebuild your system – there is no third option. However, if you take option number one and you pay the ransom, the chances are you will again be targeted and you end up perpetuating the cycle of infection and victimization.”
He explained that there is limited protection against ransomware, with no antivirus or end-point security solution technology able to protect you, adding that protection comes down to user-education and good business practice, and for any business.
He maintained that it is a must have that disaster recovery is in place if they hope to come out of a ransomware breach relatively unscathed.
He highlighted the two different types of ransomware to include opportunistic and targeted, adding that the targeted ransomware will look for individuals who have access to critical and valuable information, for example, a CEO or CFO of an organization.
“If you are a business that has mitigating controls in place, and you are targeted by a successful attack, then it will be a matter of invoking the disaster recovery process. This will be based on the businesses information classification criteria and management principles. Every organisation will have information that is deemed to be valuable – and without access to this information, a business could suffer inadvertent loss and eventually begin losing money. Therefore, the disaster recovery controls around the businesses critical information will need to allow for that data to be readily available within a certain timeframe, for business to continue,” Vuuren noted.
According to Vuuren the best practice for Ransomware attacks is back up, while the best defense against ransomware is to reduce your vulnerability in the first place.
“This means backing up the company’s critical and valuable information on a regular basis. Hence, if your businesses become a target of a ransomware attack, having to pay the ransom may not bear consideration as the business will have access to its valuable information that has been backed up. It is important that the companies maintain offline back-ups so that the back-ups are not readily accessible to an attacker.
“Businesses should exercise good email and website safety practices – ensuring that individuals download attachments, click URLs or execute programs only from trusted sources,” Vuuren affirmed.
When you get a security message from a web browser, Vuuren said take heed of it and also manage administrator rights accordingly.
“Many businesses still use the default administrator account on their network. Instead you should delete or rename the administrator account or create an account with administrator privileges,” Vuuren warned.
Vuuren remarked that it should be an executive management imperative for businesses to educate their employees about the challenges around ransomware making staff aware of any security issue that arises, or is currently topical – this could be ransomware, PoPI, encryption – your people need to be aware of it.
“Organisations should prepare themselves for the likelihood that they may be targeted by a ransomware attacker by implementing the mitigating controls of back-up and more especially user awareness. If they maintain the vigilance outlined above they will be able to reduce the impact of the ransomware,” Vuuren concluded.
