Ransomware and Ransomware Protection
Ransomware is malware that encrypts personal files and demands a ransom to be paid within a specified time or the data will be lost forever. It can be particularly devastating for businesses and organizations that cannot afford to pay the demanded sum or do not have available backups of their data. Ransomware is a growing threat that cybercriminals continue to target with increasing frequency.
Many ransomware attacks are targeting critical organizations such as hospitals, schools, fuel pipelines, and governments. These organizations have the potential to disrupt services for large populations of people and can create shortages, increase the cost of goods/services, or even cause the shutdown of entire cities or nations.
The FBI believes that the 2021 WannaCry ransomware attack was likely perpetrated by a state-sponsored group. It is estimated that the malware affected more than 150 countries on its first day of attack. WannaCry used a weakness in software and firmware found in medical devices that were not patched and updated as needed.
While the WannaCry attack was a high-profile event, these types of attacks are not uncommon and can happen to any business or organization. Ransomware attackers are constantly developing new strains of malware to infect computer systems, including targeting more advanced industrial control systems and ecosystems.
There are many things that companies can do to help reduce their risk of ransomware and other forms of malware. These include educating employees to be alert for suspicious emails, implementing an incident response plan, and ensuring that digital devices are regularly patched/updated. The FBI recommends that companies contact their local field office or the Internet Crime Complaint Center if they become a victim of ransomware, and to refrain from paying the demanded sums.