DISK INVENTORY X MALWARE PATCH
DISK INVENTORY X MALWARE CODE

Define a consistent baseline for your operating systems and ensure they’re up to date to latest patch level.

DISK INVENTORY X MALWARE CODE

Patch your OS and Apps, and have inventory of your assets – Ransomware, as any other piece of malware code has to exploit some vulnerability in order to get initial foothold this may be a careless user running macro enabled document OR a exploit in Java or Adobe OR using legitimate utilities like Powershell.

Needless to say that don’t keep backup copy on the server which is backed up have seen many making a mistake of backing up their web server and leaving the master copy on the server itself.

If you keep backup on your mapped drives ensure that you disconnect that after the backup.

You may also look for cloud based backup Azure, AWS or even your local cloud provider have any options for in-cloud backup. Periodical restore would be helpful, so that you can trust your backups. Have second copy of offsite backup that will come in handy, in case, your primary backup also gets infected (mapped drives, careless admins etc). So, this will be a good exercise to ensure that what IT backs up is in sync with business needs.

At enterprise level, mostly there is good backup policy I’d recommend to reassess what’s currently being backed up may be check with business on what they think should be backed up – and you’ll be surprised that what business think is most important is not even included in the backup list. Let’s see, how we can handle the Ransomware epidemic:īackup, Backup and Backup – I can’t stress enough that backup is utmost important for any organization. Now, once they have the control over document they demand ransom to give you the access back to your files. They use traditional methods to get initial infection to their victim and encrypt document on client PC so that they are inaccessible. The technology is dual edge sword legitimate use of encryption is required to safeguard information from falling into wrong hands but hackers have used this technology to become their cash cow. This post is going to focus on another revenue stream for hackers – Ransomware. I had written a separate post to handle this crime, more details can be found here – The infamous CEO Scam brought billions of dollars to CyberCriminals. 2016 will go in history as the year CyberCriminals made fortune by using vulnerabilities found in technology and moreover exploiting human weaknesses.

Disk inventory x malware