21 Aug Ransomware, a 2021 cyber hot topic
In response to the pandemic, many end-users have transitioned to working from home instead of commuting to the office. Homes are now used as business offices, and computers and networks are shared by family members. Families are taking classes, doing homework and surfing the web in addition to performing business functions all from their home address.
The data created may be stored locally or in the cloud. Backups may not happen until the device is returned to the office or the end-user manually backs it up. This new environment is ripe for cyber-attacks.
Ransomware is one of those cyber-attacks that are on the rise. It’s a type of malware that is normally delivered through a phishing message. The phishing message entices the reader to click on a link or open an attachment. When the recipient falls for the phish, the process of infecting the device is started. It initiates a connection back to the attacker’s device to receive instructions for encrypting the device.
Once the encryption is completed, the user is locked out of their data and the device. At this point, a ransomware note is displayed and a ransom is demanded in cryptocurrency (i.e. Bitcoin) to regain access to their data and their system.
What does this mean to you? How may you protect your family, data and devices from these cyber attackers? Here are some best practices for cyber hygiene that can help protect you from becoming a victim of ransomware.
- Don’t open any emails from someone you don’t know or that you aren’t expecting to receive.
- Don’t click on links in messages.
- Avoid opening attachments in messages. Download the attachments and then scan them for malware prior to opening.
- If it sounds too good to be true, it probably is. DOn’t give away any personal information that could allow an attacker to compromise your devices or steal your identity.
- Install anti-virus/anti-malware software on your device and keep it up to date.
- Apply patches to all applications and the operating system as they become available.
- Don’t browse suspicious sites. Cybercriminals count on users mistyping the name of a legitimate site. These sites are made to resemble the legitimate site, but are actually used to deliver malware to the device.
- Don’t respond to pop-up windows instructing you to call a number for support. Attackers use this method to steal your personal and credit card information. Once you allow them to remotely access your device, they will install additional malware on your device instead of removing it.
- Don’t respond to a ransom note on the screen. Paying a ransom doesn’t guarantee that you’ll gain access to your data and/or your system. The attackers will normally request payment in a form of cryptocurrency, like Bitcoin, that can’t be traced. And, once the ransom is paid, your money is gone.
- Did you provide the attacker with personal and/or credit card information? Put a fraud alert on your account at the three major credit reporting bureaus (Experian, TransUnion and Equifax). This should prevent the cybercriminal from using your information to open new accounts in your name. If credit card information was provided, contac tyour credit card company and report it to their fraud department. Often, they will issue a new credit card number and shut down the old account to prevent it from being used fraudulently.
It’s important to seek professional assistance when needed. Contact your employer’s IT security department and/or local law enforcement to allow them to trace the source of the infection. One step to take immediately is to use a separate, non-infected device to change passwords on all accounts that were accessed from that device.
LEARN MORE: