ProfilePic
By Jeff Jackson
Vice President, Chief Information Security Officer

Tips to Prevent a Ransomware Attack

Oct 08, 2019

  • Helpful Tips

October is National Cybersecurity Awareness Month

Individuals and businesses have become targets of a growing online fraud scheme known as ransomware. Ransomware is a form of malware cybercriminals use to freeze your computer or mobile device, steal your data, and demand a “ransom”—typically anywhere from a couple of hundred to thousands of dollars—be paid.

Ransomware poses risks to individual computers or laptops, enterprise networks, and servers used by government agencies, financial institutions, and healthcare providers.

In recognition of October as National Cybersecurity Awareness Month, NASB highlights nine tips for consumers and businesses to exercise to thwart ransomware attacks.

Tips for consumers:

  • Don’t click. Visiting unsafe, suspicious, or fake websites can lead to malware intrusion. Be cautious when opening e-mails or attachments you don’t recognize, even if the message comes from someone in your contact list.
  • Always back up your files. By maintaining offline copies of your personal information, ransomware scams will have a limited impact on you. If targeted, you will be less inclined to heed cybercriminals' threats.
  • Keep your computers and mobile devices up to date. The latest security software, web browsers, and operating systems are the best defenses against viruses, malware, and other online threats. Turn on automatic updates to receive the newest fixes as they become available.
  • Enable popup blockers. To prevent popups, turn on popup blockers to avert unwanted ads, popups, or browser malware from constantly appearing on your computer screen.

Tips for businesses:

  • Educate your employees. Employees can serve as the first line of defense to combat online threats and actively help stop malware from infiltrating the organization’s system.  A strong security program paired with employee education about the warning signs, safe practices, and responses aids tremendously in preventing these threats.
  • Manage the use of privileged accounts. Restrict users’ ability to install and run software applications on network devices to limit your network's exposure to malware.
  • Employ a data backup and recovery plan for all critical information. Backups are essential for lessening the impact of potential malware threats. Store the data on a separate device or offline so you can access it during a ransomware attack.
  • Make sure all business devices are up to date. Ensure antivirus and anti-malware solutions are set to automatically update and conduct regular scans so that your operating systems operate efficiently.
  • Contact your local FBI field office immediately to report a ransomware event and request assistance. Visit https://www.fbi.gov/contact-us/field to locate the office nearest you.