The Art of Avoiding Ransomware

Even today's sophisticated virus and malware protection can be thwarted by ransomware. This article explains the different facets of multi-layered security to help minimise the chances of being infected by ransomware, subsequently avoiding the catastophic effects Ransomware can have on your business operations.

Avoiding Ransomware with Multi-Layered Security

1. Always Keep Backups. - With ransomware your data cannot be recovered unless it's backed up. A good backup strategy is required that covers every user, device and file, and is itself protected from being infected.


2. Lock down administrative rights. - Don't give users administrative rights, even on their own machines.


3. Keep your Devices and Apps up to date. - Keep systems and apps current with the latest patches and security updates.


4. Protect your Internet Gateway with a decent firewall. - A decent firewall will help protect your network by blocking unauthorised intrusion, spam, viruses and phishing. It can also block "phone home" attempts made by malware.


5. Have Endpoint protection on every device.Gateway Protection can't protect against a rogue USB stick or when a laptop is off the office network. Make sure very device has complete and current security (even phones).


6. If an email looks supicious then it probably is.90% or more of Ransomware is distributed by email. Teach your users to delete emails that look like spam. Better still setup advanced email filtering on your email system, to reduce the number of malicious emails your users have the opportunity to open.


7. Don't Open Attachments. Unless you are 100% positively, 100% absolutely sure that you recognise both the sender and the file then leave the attachment alone. If you do open an attachment then ensure macros and executables are disabled.


8. User trainingUndoubtedly the weakest point in many organisations. Most breaches are caused by a user performing an inappropriate action with an email attachment or web link. Proper on-boarding of new employees and continuing "refreshment" about security hygiene is very important.


9. Don't give away too much private information. - Cyber criminals will use "spear phishing" attacks against you or your staff in order to create an infection. Giving away private information on social media or on your website just makes the criminal's job easier.