Have you ever wondered why everyone’s talking about ransomware?
In the office, on the news, on the web…

Indeed, a few years after major attacks such as Locky or Wannacry, the impression that these cybercrimes had diminished took hold.
That said, ransomware remains one of cybercriminals’ favorite tools.
We must therefore remain vigilant, as there are no real effective solutions to date against these devastating attacks.

In this article, we take a look at the characteristics andevolution of ransomware and how to avoid it.

Two Microsoft data centers in Switzerland

Ransomware: a virus that holds your data hostage

Ransomware, also known as ransomware, is a type of malware that first appeared in Russia, then rapidly spread to reach all computerized countries.
Installed on your computer by a simple link you click on in a message, on a website or on social networks, it enables the criminal to take possession of your system remotely.
A pop-up window then appears, informing you that your computer is blocked and that the only way to access it is to pay a ransom, which can sometimes be very high.

The authorities generally advise you never to pay the ransom to avoid encouraging the development of the virus.
Indeed, even if you do pay the ransom, there’s no guarantee that the cybercriminal will stop there.
It’s an excellent way for them to come back a little later.

Ransomware: evolving over time

While the first ransomware was exploited by beginners, today this malware has been integrated and tamed by skilled, organized and efficient cybercriminals.

For businesses, dealing with the threat of ransomware is no longer just about enforcing a basic digital hygiene process: it’s about preparing for major crises, understanding the motivations and workings of attackers, and how ransomware fits into new attack scenarios.

Ransomware: how to protect yourself?

IT experts are unanimous in saying that the best way to protect yourself from a ransomware attack is toprevent it from happening in the first place.
Yes, but how?

Numerous methods exist for dealing with attacks.
However, these solutions are not always effective, and require advanced technical skills that not every user necessarily possesses.

Here is a list of steps we can recommend:

Invest in a comprehensive, advanced cybersecurity solution

It’s essential to have a protection program designed to prevent such attacks as ransomware.
This protection must be real-time.

Back up your data securely and regularly

Use an outsourced storage space, for example in the cloud, that has a high level of authentication.

If you choose the option of backing up your files on USB media or an external disk, make sure you physically disconnect the media from your computer after your backup.
This will prevent them from being infected as well.

Update your system and software

Remember, the WannaCry ransomware attack took advantage of a weakness in Microsoft systems to affect hundreds of thousands of machines.

Although the company had released a patch correcting this security flaw in March 2017, many people had not installed this update and found themselves at the mercy of this attack.

It’s not always easy to take the time to carry out all these updates, which can be quite extensive.
That’s why we invite our customers to activate automatic updates.

You should also know that Microsoft protects Office 365 from Ransomware.
A solution that not only helps distracted users who inadvertently delete their files, but also enables you to combat the spread of ransomware.

What are pirates targeting?

For hackers, it’s not just SMEs that are in their sights, but also cities, schools and hospitals.
Contrary to popular belief, it’s not big pharma or banks that are targeted.

According to a study conducted at the end of 2017 by ICTswitzerland, the leading association for the Swiss ICT economy, 40% of Swiss SMEs have already fallen victim to cyber attacks.

This is because the infrastructures needed to back up data are often inadequate.
Also, staff are not experts in this field and do not have the right skills to deal with these kinds of risks.

Generally speaking, large groups have their own in-house IT departments, whereas smaller organizations often have to call on external service providers.
This means additional costs, which make many SMEs hesitate.
It’s important to think about this, because a cyber attack can lead to unexpected costs, or even theinterruption of your business.

So be vigilant and anticipate the measures you need to take to better protect yourself.

TEST

Can you recognize phishing emails?

Take the free test phishing test