Ransomware – What is it, and Why is it So Viable?
In cybersecurity, few threats have evolved and increased as dramatically as Ransomware. But what is it, and why has it become so virulent?
Ransomware is malware that encrypts files and holds them hostage until a payment is made. Once a victim’s computer is infected, attackers often choose to delete backup and shadow copies of their original files – making recovery without paying the ransom much more difficult. Ransomware variants also vary in how they encrypt files. Some choose to encrypt only certain file types or folders to increase the chance of successful decryption, while others are more aggressive in encrypting all available files.
Cyber criminals are always looking for new ways to spread ransomware and extort victims. Some have taken on themes like the FBI, the Internal Revenue Service, or even the COVID-19 pandemic to make their attacks more convincing and lucrative. Others use social engineering to trick victims into clicking on malicious attachments or links.
Keeping your systems up to date with the latest patches and updates is your best defense against ransomware, as well as viruses, malware, and other threats. You should also keep employees educated on how to recognize malspam, suspicious websites and other scams.
When a ransomware attack occurs, it is important to quickly disconnect the system from the network by disabling its network access or powering it down. This limits the amount of data that is exposed to attackers and reduces the risk of financial loss due to productivity losses or data loss. It is also a good idea to create a threat response team that includes an incident responder who can immediately take actions to mitigate the impact of a ransomware attack.