How to Protect Against Ransomware
Ransomware has been around for decades, with the first attack involving a Harvard-educated biologist sending infected floppy disks to attendees of an AIDS conference in 1989. The malware encrypted their systems and instructed victims to mail a $189 ransom to a P.O. box in Panama. Since then, cybercriminals have developed more advanced ransomware attacks that not only encrypt files but steal data that they threaten to publish online until a demanded ransom is paid. While average users are often the victims of ransomware, business suffer significant financial losses due to halted productivity and lost revenue.
The threat is not going away anytime soon. After a brief lull in 2022, ransomware attacks are once again at record highs and experts expect that this will continue throughout the year.
Cybercriminals have also been developing attacks that target industrial control systems and other critical infrastructures, paralyzing entire ecosystems until a ransom is paid. This type of ransomware has a real impact on the economy and could cause catastrophic disruptions to businesses and public services like transportation, healthcare, and utilities.
While there is no definitive answer as to how to protect against ransomware, the best defense is to have a well-tested disaster recovery plan and to practice sound security hygiene. This includes not clicking on email attachments or links from unknown sources, not surfing the web on unsecure Wi-Fi networks, and not using USB sticks that have been scanned or infected with malware. If a machine has been infected, disconnect it from the Internet to prevent the ransomware from communicating with its command and control servers. It is also important to disconnect any devices connected to the infected machine, including printers.