10 ways to protect SMB companies against ransomware from GFI Software: a combination of solutions and processes
47% of SMB companies consider mobile platforms to be the most vulnerable
PRAGUE, August 9, 2016 – GFI Software, a provider of enterprise network security solutions, has published 10 ways to defend against ransomware, whose presence has increased severalfold compared to last year. When protecting their networks, SMB businesses should focus on a combination of security tools and established processes, including employee training in the use of company devices. According to a recent survey by GFI Software, the largest number of Czech SMB companies want to focus over the next 12 months on protecting web access (37%) and protecting access from removable media (36%), while considering mobile platforms (47%) to be the most vulnerable – more so than PC applications, operating systems, or web browsers.
“There is no single universal cure for ransomware; the success of this extortion method has encouraged other hackers, who are devising ever new methods and avenues for attacking company data, including through social networks and mobile devices,” said Zdeněk Bínek, responsible for sales of GFI Software solutions in the Czech Republic and Slovakia. “It is necessary to rely on a combination of measures which, when implemented comprehensively, can minimize the risk of a ransomware attack and thus protect company data, reputation and, ultimately, finances and overall business continuity.”
GFI's recommended ways to protect against ransomware include:
- Regular data backups – back up critical data and store backups so that they are inaccessible from primary systems, ideally in the cloud. Data backed up in this way cannot be affected by any malware and enables recovery with negligible operational impact.
- Scanning all email attachments – multi-layered protection against email attacks is ideal, including security on both the client computer and the corporate mail server through antispam and antimalware with multiple antivirus engines.
- Scanning all external media – the widespread use of consumer electronics that can be connected to work computers in various ways requires an access control solution that blocks them when malicious content is detected.
- Web monitoring to control web access – most employees relax during work breaks by browsing the web and may unknowingly infect the corporate network with malware.
- Up-to-date software – a patch management solution that provides automated updates for all software and patches security vulnerabilities through which infection can enter;
- Employee training – If ransomware penetrates all technical defenses, users are often the last line of defense against the encryption of company data. It is therefore necessary to emphasize that they should:
o Not open email attachments from unknown senders
o Not click links in emails from unknown senders
o Check the domains in incoming email addresses
o Watch for incorrect spelling and formatting in email subjects and bodies.
o Report any suspicious files or emails to IT staff
The complete set of ten recommendations against ransomware from GFI Software can be found here.
Article author: ZEBR.ai editorial team
