“Your files are being held for ransom.”

What do you do? How can you fix it? Will your files ever be recovered? This is a small example of what can happen when you are not protected from ransomware.

Many organizations have recently been affected by an outbreak of a new ransomware variant, Wanna, which is known by a variety of aliases such as WannaC, WannaCryptor and, best of all, WannaCry. As a Sophos reseller, we want to provide you with the information that you need to protect your home and your business from these virulent attacks.

What is ransomware, and how do I protect my network from it?

Ransomware is a type of malicious software that holds true to its name. The ransomware will sporadically encrypt important files, documents and data and hold it hostage until a ransom is paid electronically. Programs such as InterceptX by Sophos serve a similar role as Liam Neeson from the Taken movies–they will find the ransomware, and they will kill the ransomware. Sophos InterceptX, Sophos Exploit Prevention (EXP), and Sophos Server Protection Advanced customers were protected proactively against Wanna ransomware from the first instance or outbreak that occured across many businesses at the beginning of May (see Wanna DecryptOr Outbreak).

On Friday, May 12th and Saturday, May 13th, Sophos was able to update their protection rules, and their endpoint software–Sophos Endpoint–now blocks every variant of Wanna from executing. This protection is crucial in protecting your business or organization from malicious software that could entirely halt business productivity.

How do I protect myself from Wanna and other ransomware?

This video demonstrates how Sophos products can help protect your network against Wanna ransomware.[/cz_title][cz_gap height=”25px”]

1. Patch up your network.

Wanna ransomware exploits a Windows vulnerability in small or midsize businesses for which Microsoft released a patch in March. It is highly likely that new attacks will appear based on the leaked exploit and is therefore critical to patch this vulnerability at the first opportunity. In order to patch the vulnerabilities, it is imperative that you update all Windows environments as described in Microsoft Security Bulletin MS17-010.

2. Update your endpoint software.

Endpoint software is essentially software that adds extra protection to the entirety of your network. That can include other phones, laptops and desktops that are on the network and vulnerable to attacks. Once the endpoint software is updated and running according to the Microsoft Security Bulletin featured above, your network should be protected from ransomware.

3. Ensure you are running advanced ransomware protection such as InterceptX by Sophos.

With this advanced protection, InterceptX serves as a safeguard from any future attacks by intercepting spontaneous file encryption and then reversing the encryption before it causes any permanent damage to your files. Home users should consider signing up for the Sophos Home Premium, which adds protection from ransomware in your home and on your personal devices.

If you still have questions about how to protect yourself from ransomware, click on the following button! Sophos wrote a great, all-inclusive article on protecting from ransomware that is user-friendly and easy to understand. We hope that you will be able to use this information to protect and safeguard your company and your home.[/cz_title]

Hackers commonly use flash drives to infiltrate networks and steal sensitive information. This is especially risky because code can be executed just by inserting a “hacked” device into your computer. Here’s how you can protect yourself and your business:

IF YOU SEE A FLASH DRIVE THAT ISN’T YOURS, DON’T INSERT IT INTO YOUR COMPUTER

It may be tempting to claim a found flash drive as your own or curiosity might get the best of you. However, it’s important to remember that you should never, under any circumstances, insert a flash drive into your computer without know exactly where it came from. It could be fine but it could also be a costly and unnecessary security risk to your business. Definitely not worth the free USB stick. If you find a flash drive and want to return it to its owner, try sending an email out to your co-workers asking if someone has lots it instead of trying to find clues about the owner in the files on the drive.

ONLY PURCHASE NAME-BRAND FLASH DRIVES FROM REPUTABLE RETAILERS

Another, equally harmful flash drive hacker scam is counterfeit “high-capacity” flash drives being sold online, particularly on sites like Ebay. These USB drives are sold at prices that are too good to be true, promising large amounts of storage. Many times they are doctored and will cause security issues for your business if used. It is very important to only purchase name-brand flash drives from reputable retailers. If you see a deal online for some off-brand USB drives that look too good to be true, it probably is. Even if the packaging and product look legitimate, it could be a scam.

IMPLEMENT A COMPANY POLICY REGARDING FLASH DRIVES

The most effective thing you can do to protect your business is making sure your employees are educated about flash drive hacker scams and what’s expected of them should they find a USB drive laying around. A good policy will outline what to do in a situation where a flash drive is found. If your company doesn’t have a policy, always ask someone if your IT department for guidelines.

Using these tips can save your company from the potential harms of flash drive hacker scams. Les Olson Company offers Managed IT Services, including data and network security services. Please contact us for a free security consultation.[/cz_title]