|
Listen now
|
Being a victim of a ransomware attack can cause hundreds of thousands or even millions of dollars worth of damage and can put your computer out of commission.
Most organizations rely on computers but if you become a victim of a ransomware attack you will not be able to use your computers affected without paying hundreds of thousands or millions of dollars.
Ransomware attackers target all types of organisations, from healthcare and educational institutions to service providers and industrial enterprises.
To protect yourself and your business from ransomware attacks, consider following the rules proposed by Kaspersky:
- Do not expose remote desktop/management services (such as RDP, MSSQL, etc.) to public networks unless absolutely necessary and always use strong passwords, two-factor authentication and firewall rules for them.
2. Promptly install available patches for commercial VPN solutions providing access for remote employees and acting as gateways in your network.
3. Always keep software updated on all the devices you use to prevent ransomware from exploiting vulnerabilities.
4. Focus your defense strategy on detecting lateral movements and data exfiltration to the Internet. Pay special attention to the outgoing traffic to detect cybercriminals’ connections.
5. Back up data regularly with special attention to offline backup strategies. Make sure you can quickly access it in an emergency when needed.
6. Avoid downloading and installing pirated software or software from unknown sources.
7. Assess and audit your supply chain and managed services’ access to your environment.
8. Prepare an action plan for reputational risk of your data exposure in the unfortunate event of data theft.
9. Use solutions like Kaspersky Endpoint Detection and Response Expert and Kaspersky
10. Managed Detection and Response service which help to identify and stop the attack on early stages, before attackers reach their final goals.
11. To protect the corporate environment, educate your employees. Dedicated training courses can help, such as the ones provided in the Kaspersky Automated Security Awareness Platform.
12. Use a reliable endpoint security solution, such as Kaspersky Endpoint Security for Business that is powered by exploit prevention, behaviour detection and a remediation engine that is able to roll back malicious actions. KESB also has self-defense mechanisms which can prevent its removal by cybercriminals.
13. Use the latest Threat Intelligence information to stay aware of actual TTPs used by threat actors. The Kaspersky Threat Intelligence Portal is a single point of access for Kaspersky’s TI, providing cyberattack data and insights gathered by our team for over 25 years.