Gone Phishing

Don’t get hooked by a ransomware attack

If you lost access to everything on your personal or work computer, how much would you pay to get it back? It’s a question more people are asking themselves as ransomware attacks have continued to grow in number and severity.

About 21% of all cyberattacks in 2021 were ransomware attacks, according to ( International Business Machines) IBM Security, costing individuals and businesses an estimated $20 billion. From 2013 to 2020, the FBI’s Internet Crime Complaint Center saw a 243% increase in ransomware reports.That growth comes thanks to services that offer ransomware-for-hire and the increased popularity of cryptocurrency, which make untraceable payments to these services easier than ever.

The FBI does not recommend victims of these attacks pay the ransom. Victims rarely see their data returned, and payment only encourages future attacks. Instead, the best protection against ransomware is to understand how it works, where it comes from and how to protect your data from the start.

What is Ransomware?

Ransomware is a type of malware, or malicious software, which locks the victim out of data on their computer until they pay for access to be restored. Most ransomware attacks target individuals, although attacks on large organizations with even bigger payouts have grown in popularity.

In the past, these situations largely involved attackers demanding a ransom to unlock the data. Today, most are “double extortion” assaults in which attackers demand payment for returning the data and to prevent it from being stolen again.

What Causes It?

Ransomware can infect your computer in many of the same ways as any other virus:

• Phishing emails — These emails trick users into downloading a malicious attachment disguised as a harmless file or visiting a website that can download the ransomware through their browsers.
• Software vulnerabilities — Hackers can find holes in a piece of software’s cybersecurity protection or buy information on these flaws to download the malware onto a device or network.
• Stolen logins — Whether they’re obtained through phishing, purchased on the dark web or hacked by brute force, stolen credentials give cybercriminals direct access to download malware onto a device.
• Repurposed malware — Some ransomware is actually malware developed for other attacks like stealing bank information, and it’s reworked to encrypt and lock personal data.

How Can I Avoid It?

Since paying attackers is not a reliable way to deal with ransomware, the best defense is to protect yourself and your devices before an attack can begin:

• Keep backups of any important data to eliminate most of the leverage an attacker might have.
• Update your computer’s software and operating system regularly to protect against the latest threats.
• Update your computer’s cybersecurity tools to help response teams detect and react to new ransomware attacks faster.
• Always be aware of phishing, social engineering and other strategies that can lead to a ransomware attack.

Visit the Stop Think Connect Website To Learn More About Cybersecurity.