Preventing and Surviving Ransomware Attacks

June 27, 2019

Prevention:

The cost to prevent an attack is far less than to fix or recover from it. Email has been the easiest and most convenient way to deliver a lethal payload. Security awareness and training focused on ransomware and social engineering should be provided periodically to end-users. An effective phishing campaign should also be rolled out to measure or quantify the effectiveness of administrative controls such as training. Secondly, you should ensure that a secure email gateway scans and inspects inbound attachments and deploys antivirus software with specific anti-ransomware features or capabilities. Finally, having an effective vulnerability management program will allow you to stay current on security patches and reduce the risk to your environment. It’s important to patch everything and patch it periodically, regardless of the operating system you might be using and extend endpoint protections to smart phones.

Everyone is at risk, including non-Microsoft operating systems. A defense-in-depth approach is recommended to reduce the risk to an attack, which employs multiple layers of security controls. Also, ensure accounts controlling your backups are dedicated accounts which are only used for running the backup process and has no broader network admin access.

Response:

If you do not have a 3rd party cybersecurity response or forensic capability in place, I encourage you to subscribe to one to augment your response capability. If you become aware of an attack, stay calm and activate your incident response protocols, including documented procedures. Make sure you disconnect infected systems from the network and preserve all the evidence for an investigation. Deploy the incident response teams to contain and limit the damage. Cleanup infected systems by wiping them clean and rolling back to the pre-ransomware state with an effective backup capability (cloud service) in place. All preserved logs, evidences and lessons learned should be well documented and communicated to the relevant stakeholders. Depending on the attack, you may need to involve law enforcement.

The BizzSecure EAID solution can assist in this area. This out-of-the-box, next generation GRC solution automates information security compliance and assessments, and provides visibility to the security posture of your infrastructure. For more information, check out this page (https://www.bizzsecure.com/services/eaid-next-generation-grc/) and stay tuned for more information on how to keep you and your business safe.

60 Comments

  1. binance register

    Thanks for sharing. I read many of your blog posts, cool, your blog is very good.

    October 17, 2024 at 11:44 pm
    Reply

  2. sign up for binance

    Thanks for sharing. I read many of your blog posts, cool, your blog is very good.

    February 20, 2025 at 2:34 pm
    Reply

  4. Yukiko Perone

    A [bingo](https://bingo-br.com) valoriza o atendimento ao cliente, com uma equipe dedicada disponível 24/7 para resolver qualquer dúvida. Com respostas rápidas e soluções eficazes, você pode contar com a plataforma para garantir a melhor experiência de jogo.

    March 14, 2025 at 8:29 am
    Reply

  7. indicac~ao da binance

    Can you be more specific about the content of your article? After reading it, I still have some doubts. Hope you can help me.

    April 7, 2025 at 5:38 am
    Reply

  8. nasa

    Hey just wanted to give you a quick heads up. The words in your article seem to be running off the screen in Ie. I’m not sure if this is a format issue or something to do with browser compatibility but I thought I’d post to let you know. The design and style look great though! Hope you get the problem solved soon. Kudos

    April 10, 2025 at 2:15 pm
    Reply

  9. bingo

    This is gold, thank you!

    April 21, 2025 at 4:37 pm
    Reply

  24. Cod de recomandare Binance

    Thank you for your sharing. I am worried that I lack creative ideas. It is your article that makes me full of hope. Thank you. But, I have a question, can you help me?

    May 5, 2025 at 12:18 pm
    Reply

  46. binance registrering

    Your point of view caught my eye and was very interesting. Thanks. I have a question for you.

    May 10, 2025 at 7:41 pm
    Reply

  50. kupit-akkaunt.online_Skify

    площадка для продажи аккаунтов kupit-akkaunt.online

    May 14, 2025 at 12:32 am
    Reply

Leave a Reply