Ransom software.
Discussion
How much is it versus what have you got to lose?
We got stung last year, they wanted £2500 to unlock our servers. We refused to pay out of principle and restored the last known clean back up. We lost around 24 hours of data.
Since then the IT support company we use have upgraded our protection, not sure of the exact solution or the costs off the top of my head but they assure me it won't happen again.
Apparently they'd got in through a back door which was a server access password that hadn't been changed for a significant period of time. Possible is was an ex IT bod that we'd asked to be removed from the account who was subsequently fired.
We got stung last year, they wanted £2500 to unlock our servers. We refused to pay out of principle and restored the last known clean back up. We lost around 24 hours of data.
Since then the IT support company we use have upgraded our protection, not sure of the exact solution or the costs off the top of my head but they assure me it won't happen again.
Apparently they'd got in through a back door which was a server access password that hadn't been changed for a significant period of time. Possible is was an ex IT bod that we'd asked to be removed from the account who was subsequently fired.
surveyor said:
I read this and am glad I no longer run a server...
Surely this should be part of the server anti-virus package, which in themselves are not cheap. Seem's to me there are more than one Ransomer out there....
Don't worry, when you open that fake invoice PDF on your laptop and get all your files encrypted, your cloud sync software will faithfully sync all that up to your cloud copies too... top tip: make sure your cloud has file history and it works.Surely this should be part of the server anti-virus package, which in themselves are not cheap. Seem's to me there are more than one Ransomer out there....
Backups and education are the only real answer... but feel free to pay for protection if it helps you sleep at night
You can buy tech to examine PDFs and other attachments for exploits, there is also other (agent based) tech which can add further layers of protection to servers or workstations)
Agree security awareness training is important, but a sophisticated targeted attack would likely succeed.
AV companies are being very slow to react to ransomware, I think Sophos are one of the only big players to have something in that space. More likely you'd be looking at something more specialised - if you want (independent!) advice please ask.
Agree security awareness training is important, but a sophisticated targeted attack would likely succeed.
AV companies are being very slow to react to ransomware, I think Sophos are one of the only big players to have something in that space. More likely you'd be looking at something more specialised - if you want (independent!) advice please ask.
Although user education is obviously important, it's just not as simple as that. Even IT people can't keep up with the way these new threats materialise, so it's not very realistic to expect an end user to know if they can or cant open a certain link or type of attachment. It's definitely something that security software should be handling in my opinion. Also important for backups to be protected and stored offline.
Gassing Station | Business | Top of Page | What's New | My Stuff