Cryptolocker: How to protect your business with Endian UTM
What is the cryptolocker virus?
The cryptolocker virus sneaks its way onto computers systems by tricking a user into clicking a link. This link could be from a webpage or an attachment in a spam email. Once the link is launched, the cryptolocker virus begins encrypting data in the background which essentially locks all your files with a special code making it unusable to read or write too. However with our complete list of basic preventatives and incorporating the Endian UTM firewall solution we can minimise the risk of the Cryptolocker Virus destroying your business in 2021 today.
What is encryption and how does it work?
Encryption, in the case of ransomware such as the Cryptolocker Virus, means that the data is altered so it can only be accessed through a unique decryption key.
The key is almost impossible to crack, even by professionals, as the combinations are endless. When the encryption is complete, the user will be presented with a screen that asks for payment within a time-frame in exchange for the decryption key, and the data can no longer be accessed.
The need to access sensitive and important data puts pressure on businesses to pay thousands of dollars for the key that promises to decrypt everything. However, there is no guarantee the key will work with the Cryptolocker Virus. It will not prevent repeated attacks on the compromised computers either. In fact this is mostly true in a lot ransomware attacks on businesses.
The statistics on the Cryptolocker virus?
UK cyber security company Sophos conducted a worldwide survey on ransomware and found the median cost of attacks for businesses was approximately $194.000 Euro. It also found that almost half of Australian businesses (48%) were the targets of Cryptolocker Virus attempts in 2020-2021 alone.
It isn’t sustainable to pay the ransom once or even multiple times if your business is repeatedly targeted or to leave your business unprotected from this threat.
The former head of the Australian Cyber Security Centre Alastair MacGibbon has cautioned about the virus, stating that “ransomware continues to be one of the greatest cyber security threats to us all. And due to its non-discriminatory nature, if your network is unprotected you may fall victim.”
How can I protect my data against the Cryptolocker virus?
There are options and we have provided some of our recommendations below that could further enhance your security with regards to the cryptolocker virus.
Regularly patch or update all your devices
Computers are more vulnerable to attacks when their operating systems are not up to date. Automatic updates can help keep all computers in your network protected. It is no secret that if you are running older versions of Microsoft Windows then you are highly likely to get the Cryptolocker Virus. This does not mean you cannot get it if you have Windows 10 in fact you are still a major target.
Turn on Anti Virus and ransomware protection in Windows
Windows 10 has come out with major security enhancements to protect your machine. It is highly recommended to have these options turned on. In particular the Virus and threat protection service, firewall, and App & browser control. However be warned if your computer is old or you are not familiar with these services then it could cause issues with applications that you are currently using. This is why further down the page we recommend the Endian UTM as it is a well supported and developed hardware firewall which is less likely to interfere with your computer and protect your network from the outside.
Create regular backups and keep them separate
If your business is unfortunately the target of ransomware or similar ransomware attacks, backups will decrease any losses of important data and allow computers and networks to be restored to former states without the virus. Make sure to keep these separate from the network and offsite this will not only protect you from ransomware but in case of fire.
Inform employees about safe email and browsing habits.
Emails may present themselves as professional and trick users into downloading attached files that are dangerous. Inform employees on how to spot these, and to not download any files they are unsure or suspicious of. The same goes for websites, no files should be downloaded if they are unknown. If one is accidentally downloaded, it should be deleted and not launched. Perhaps increase email spam levels with your office 365 tenant to ensure that dangerous emails do not go into the inbox of your employees. Professional development training sessions are a real must to help prevent these misadventures in your organisation.
Ensure local network drives are secured against the Cryptolocker virus
If you are using a SMB network share then ensure that the share and NTFS permissions are set properly. Ensure that everyone does not have access to those shared folders and only the specific users or groups of people who need access. The Endian UTM also has the capability to specifically target the security of network shared folders being attacked through the use of the intrusion detection system.
Change passwords every 3 months for everything
Changing passwords every 3 months and turning on 2 factor authentication for all systems will greatly reduce security risks as a whole. This includes your email accounts, Facebook and computer accounts this will ensure that you are doing everything possible to make it difficult for your information to be released to unauthorised users. In fact in most government organisations password resets every 3 months is a standard routine.
Endian UTM (Firewall, Web Content Filter, Intrusion Detection)
It’s vital to have complete protection and security insight for your entire network to protect against all threats including ransomware viruses. Go Tech Deals recommends the Endian UTM which will protect your complete network from a range of attacks including Cryptolocker. It does this by scanning all your local and internet traffic using intrusion detection techniques before it arrives on your computers or servers. Here is an interesting tutorial from endian which assists their customers in protecting against ransomware virus’s. For more information about this product please contact Go Tech Deals on 03 8691 2230, or check out endian.com for further information about the company.
Product specifications and benefits can be found here.
