Cybersecurity in a nutshell – what is ransomware and how to protect yourself effectively
Every day we hear about cyberattacks that affect not only large companies, but also smaller organizations and individuals. In February this year, hackers…
Every day we hear about cyberattacks that affect not only large companies, but also smaller organizations and individuals. In February this year, hackers used a ransomware attack to encrypt the data of the Polish Medical Air Rescue. They demanded a ransom of approximately PLN 1.5 million in exchange for decrypting the data. The attack disrupted communications and caused problems with the operation of the Polish Medical Air Rescue website. This is just one example – the frequency of ransomware attacks is increasing, and prevention alone is not enough to protect against them. How does such an attack work, and what can be done to effectively protect data?
What is ransomware
Ransomware is one of the most dangerous types of malware. The name comes from the word “ransom,” meaning a payment demanded in exchange for something. The purpose of an attack is precisely to extort money from the victim – the malicious software infects and blocks a computer system by encrypting selected files. In most cases, the victim is required to pay a ransom to have the block removed. However, paying the ransom does not guarantee that access will be restored or that the data will be recovered. The victim can never be certain that they will receive the necessary decryption key after making the payment. They also do not know whether their data has already been permanently destroyed or shared with third parties. The most commonly targeted vulnerabilities include weaknesses in publicly accessible services and insufficiently secured remote access channels to infrastructure. Cybercriminals gain access to the victim’s computer through an attachment in an email or via a web browser when the victim visits an infected website.
Known examples of ransomware attacks
The first attack aimed at encrypting files was the so-called AIDS (PC-Cyborg) attack in 1989. The spread of this type of attack increased significantly in 2005–2006, along with the rapid growth in the availability of internet services. Some of the most widely reported security breaches occurred at companies such as Kia Motors (hackers demanded approximately $20 million in ransom), Acer ($50 million ransom), and the Washington DC Police Department (the most well-known ransomware attack on a police department in the USA), during which hackers blocked confidential files and demanded $4 million. One of the first large-scale attacks was the 2013 CryptoLocker attack – it was not brought under control until many months later, by which time victims had already paid approximately $3 million to cybercriminals.
How to protect yourself against a ransomware attack
Experts agree that an important element of protecting data against ransomware attacks is regularly creating backups and storing them outside the company’s premises. Storing backups on the same network you use every day exposes them to encryption during an attack along with other data. A secure place to store data is, for example, a cloud backup. It is also worth creating multiple backups – according to cybersecurity specialists, the minimum number of backups is three, with at least two stored in different locations. One effective solution for companies that want to back up data to an external location without having to build their own offline facility is Veeam Cloud Connect – a technology that enables secure and fast cloud backup.
Another good cybersecurity practice is to keep systems, plugins, and browser software up to date. As a manager or business owner, make sure your employees are trained to update their software, operating systems, and browsers. If your company operates remotely, it is worth securing the VPN network and SSH tunneling, as well as using high-quality antivirus software. You should also regularly conduct security audits, preferably performed by qualified external providers.
If you need help implementing the most effective solution for data protection and cloud backup, we are at your disposal.