Taking a Proactive Approach to Combat Ransomware [Druva Webinar]
1 like693 views
Ransomware attacks have surged by 300% since 2015, costing businesses and public agencies significantly, with a notable example being the Kansas Heart Hospital attack in May 2016. To mitigate risks, organizations should implement preventive measures such as regular backups, employee training, and robust security protocols. The document emphasizes the importance of continuous updates and effective data protection strategies.
![Taking a Proactive Approach to Combat Ransomware [Druva Webinar]](https://image.slidesharecdn.com/takingaproactiveapproachtocombatransomware-druvawebinar-160526170043/85/Taking-a-Proactive-Approach-to-Combat-Ransomware-Druva-Webinar-31-320.jpg)
Taking a Proactive Approach to Combat Ransomware [Druva Webinar]
- 1. 1 The Rising Tide of Ransomware John Shier Senior Security Advisor @john_shier
- 2. 2 Ransomware
- 3. 3 Ransomware Increasingly Troublesome $209m cost of ransomware attacks in the first quarter of 2016 300% increase in ransomware attacks since 2015Source - Symantec Ransomware Discoveries
- 4. 4 Ransomware Attacks Are Pervasive Ransomware Targets • Businesses (Retail) • Public agencies (Education, Healthcare, Government, Law Enforcement) Systems Impacted • Windows, Mac, Linux • Android
- 6. 6 Fake AV
- 7. 7 Out with the old, in with the new FakeAV Ransomware
- 11. 11 Petya
- 12. 12 Spam
- 13. 13 Spam
- 14. 14 Phishing
- 15. 15 Phishing
- 16. 16 Return of the mac(ro)
- 17. 17 HD phishing
- 18. 18 Locky
- 19. 19 Locky
- 20. 20 Cryptowall
- 21. 21 Paths to exclude windows temp cache sample pictures default pictures sample music program files program file (x86) games sample videos user account privileges packages Files to exclude help_your_files.txt help_your_files.html help_your_files.png Iconcache.db Thumbs.db Extensions to exclude exe dll pif scr sys msi msp com htl cpa msc bat cmd scf Cryptowall
- 22. 22 Tips for preventing ransomware 1. Don’t enable macros. 2. Consider installing Microsoft Office viewers. 3. Be very careful about opening unsolicited attachments. 4. Don’t give yourself more login power than necessary. 5. Patch, patch, patch. 6. Train and retrain employees in your business. 7. Segment the company network. 8. Back up your files regularly and keep a recent backup off-site
- 23. RANSOM DOES NOT GUARANTEE YOUR DATA BACK Kansas Heart Hospital was hit with a ransomware attack on 18th of May 2016 It paid the ransom, but then attackers tried to extort a second payment Source: Network World http://www.networkworld.com/article/3073495/security/kansas-heart- hospital-hit-with-ransomware-paid-but-attackers-demanded-2nd- ransom.html
- 24. FAIL PROOF RANSOMWARE PROTECTION • Protection against ransomware o Regular time-indexed snapshot backups o Flexibility in backup frequency and data retention policies o Comprehensive data protection for endpoints and cloud apps o Offsite data storage (AWS/Microsoft Azure) options • Recovering from ransomware intrusion o 24/7 data access o User/admin restore o Locate suspicious files quickly on endpoints and cloud apps Ransomware • Backup data regularly • Recover at the device or file level • Locate suspicious files via search You Can’t Prevent Ransomware Attacks, But You Can Protect Against It
- 25. TIME-INDEXED BACKUPS WITH CONFIGURABLE GRANULAR CONTROLS
- 26. BACKUPS SHOULD BE COMPREHENSIVE Mobile Devices – Smartphones and Tablets Desktops and Laptops Cloud Applications
- 27. IT/USER FILE LEVEL RESTORE FROM SNAPSHOTS IT Initiated Restore User Initiated Restore
- 28. RANSOMWARE FILE LEVEL SEARCH
- 29. SUMMARY AND KEY TAKEAWAYS • Update your security software o Anti-virus and anti-malware software o Operating systems for all endpoints including desktops, laptops and smartphones o Patch, patch, patch. • End-user awareness and education • Protection against ransomware o Proactive: Regular time-indexed snapshot backups o Remediation: File level restore and search for infected files
- 30. • Trusted by over 4,000 enterprises • Headquartered in Silicon Valley • Worldwide offices and 24x7 support • Among fastest growing data protection providers 30 ABOUT DRUVA