How to fight ransomware: Don't be a victim

15 พฤษภาคม 2560

Backup, then backup again, best way to avoid losing important files. Updating antivirus & malware software also important.

COMPUTER SECURITY

How to fight ransomware: Don't be a victim

15/05/2017
Associated Press News agency

An online extortion attack that authorities say swept 150 countries this weekend is part of a growing problem of so-called "ransomware" scams.

In ransomware scams people find themselves locked out of their files and presented with a demand to pay hackers to restore their access.

Hackers bait users to click on infected email links, open infected attachments or take advantage of outdated and vulnerable computer systems.

Some organisations don't install computer security upgrades because they're worried about triggering bugs, or they can't afford the downtime.

This is according to Lawrence Abrams, a New York-based blogger who runs BleepingComputer.com.

Here are five tips to make yourself less-likely to become a victim:

MAKE SAFE AND SECURE BACKUPS

Once your files are encrypted, your options are limited.

Recovery from backups is one of them.

How can one do a simple daily backup?

One can do a simple daily backup by copying the files you have downloaded or been working with during the day to an external harddrive or to a small flash drive.

Unfortunately, most people don't have backups.

Backups often are also out-of-date and missing critical information.

Some versions of Windows have a "shadow volume" with a copy of files that can be used to restore files if an attack occurs.

Beware, some ransomware does also sometimes targets backup files, though.

MULTIPLE BACKUPS EVEN BETTER

You should also try to make multiple backups - to cloud services and using physical disk drives.

The more copies you have, the more redundant you are, the safer you will be.

You should backup at regular and frequent intervals.

It's also a good idea to back up files to a drive that remains entirely disconnected from your computer network and the internet.

UPDATE AND PATCH YOUR SYSTEMS

The latest ransomware was successful because of a confluence of factors.

These factors include:

1. A known and highly dangerous security hole in Microsoft Windows,

2. Tardy users who didn't apply Microsoft's March software fix, and...

3. Malware designed to spread quickly once inside university, business and government networks.

Updating software will take care of some vulnerability.

UPDATING COMPUTER WITH SECURITY PATCHES IS IMPORTANT

"Hopefully people are learning how important it is to apply these patches," said Darien Huss, a senior security research engineer for cybersecurity firm Proofpoint, who helped stem the reach of the weekend attack.

"I hope that if another attack occurs, the damage will be a lot less.

But there are obviously many, many computers out there and some people still, I feel, will not think that they need to patch their computer."

"So if an attack like this occurs again, there will still be infections."

USE ANTIVIRUS SOFTWARE

Using antivirus software will at least protect you from the most basic, well-known viruses by scanning your system against the known fingerprints of these pests.

Low-end criminals take advantage of less- savvy users with such known viruses, even though malware is constantly changing and anti -virus software is frequently days behind detecting it.

EDUCATE YOUR WORKFORCE

Basic protocol such as stressing that workers shouldn't click on questionable links or open suspicious attachments can save headaches.

System administrators should ensure that employees don't have unnecessary access to parts of the network that aren't critical to their work.

This helps limit the spread of ransomware if hackers do get into your system.

IF HIT, DON'T WAIT AND SEE

Some organisations disconnect computers as a precautionary measure.

Shutting down a network can prevent the continued encryption - and possible loss - of more files.

Hackers will sometimes encourage you to keep your computer on and linked to the network, but don't be fooled.

If you're facing a ransom demand and locked out of your files, law enforcement and cybersecurity experts discourage paying ransoms because it gives incentives to hackers and pays for their future attacks.

There's also no guarantee all files will be restored.

Many organisations without updated backups may decide that regaining access to critical files, such as customer data, and avoiding public embarrassment is worth the cost.

"My answer is, never pay the ransom," Abrams said. "But at the same time, I also know that if you're someone who's been affected and you've lost all your children's photographs or you've lost all your data or you lost your thesis, sometimes $300 is worth it, you know?"