Ransomware, a virus used to infect and encrypt files in exchange for a ransom, has become one of the cybercrimes that most affect businesses. José Carlos Jiménez, Cyber Underwriter at AIGhas published a ten-step guide on the main measures to prevent ransomware (data ransomware) for a special report prepared by INESE on the occasion of International Cyber Security Day on 30 November.
What can we do to prevent this attack?
- Be careful when opening attached linksespecially if they originate outside the company.
- If it is suspected that a computer has been infected, disconnect it from the network. (via cable or wifi configuration). Do not turn it off.
- Contact the Head of Systems.
- At home, frequent backups of the computerand other important files, and check them regularly. Thus, if you become infected, you can restore using those copies.
- Saving backups separately on a device that is not accessible from the network, e.g. an external hard disk. Once the backup is complete, be sure to disconnect the external hard disk or separate the device from the network or computer.
- Update and patch the computer. It is necessary to ensure that applications and operating systems have been updated with the latest patches. Vulnerable applications and operating systems are the target of most ransomware attacks.
- Use and maintain protection software programmes. Anti-virus software can provide mitigation against ransomware. Consider using it and make sure it is up to date.
- Be careful when opening links and attachments in emails, even if the sender is someone you know, especially if the attachments have unusual extensions or ask you to activate macros or change system settings.
- If you fear being attacked by ransomware, isolate the infected system from all networks and disable wireless, Bluetooth and any other potential network network capabilities. Confirm that all shared and networked drives are disconnected, either wired or wireless.
- And, as well as to prevent any kind of cyber-attack, it is essential, both at home and at work, to create strong passwords and to change them regularly. In addition, it is advisable that they are longer than eight characters, combine letters and numbers, upper and lower case, contain special characters and do not use recognisable words.