A large-scale cyber attack is currently under way against a number of companies and other entities, including in Portugal. Organisations are being affected by a Cryptolocker, a type of malware that demands payment of a sum to release the hijacked data.

Specifically, a new strain of Ransom.CryptXXX (WannaCry) began spreading today and is now hitting several large companies in Portugal, such as EDP and PT. This malware is affecting computers running Microsoft's Windows system.

What type of attack is this?

This attack is being carried out by a Cryptolocker, which demands payment of 300$ to 600$ in bitcoins to recover the hijacked files.

What is a Cryptolocker?

Known as a Cryptolocker, this type of virus belonging to the malware family was designed to infect computers running the Microsoft Windows operating system and usually reaches devices by email. When run, the cryptolocker installs itself on the computer and starts encrypting all the files, completely blocking access and demanding payment of a ransom to recover them.

What can be done to avoid this cyber attack?

To ensure business continuity and avoid exposure to this type of danger, your company should invest in security and advanced detection and response tools capable of discovering and blocking attacks. These investments aim to search for potentially unusual behaviour and regularly monitor previously defined trends and activities.

How do I protect my company's data?

Prevention is crucial in dealing with this type of attack.

• Step 1: Strengthen the weakest link - the human element

Your employees should be instructed to watch their online activities, not visiting dubious websites or opening e-mails from unknown sources. E-mail is the main channel through which this type of attack spreads, so if any e-mail content looks suspicious to you, you should delete it, never clicking on links or attachments.

• Step 2: Implement an automatic backup system

By implementing software that automatically backs up all documents to the cloud, you will always keep your files safe, allowing the affected information to be restored in the event of an attack.

SkySafe is an automatic backup system that simplifies the management and monitoring of backup processes, ensuring the encryption, scalability and continuous security of critical data on company computers and servers.

• Step 3: Keep the operating system up to date

• Step 4: Protect the perimeter with Next-Gen Firewalls

Traditional network models and systems for protecting and filtering access to companies (firewalls) and classic antivirus systems can no longer provide an integrated and reliable response to threats such as malware and ransomware. The latest UTM - Unified Threat Management appliances should therefore be implemented. Due to the emergence of blended threats, which combine several types of malware and attacks aimed at different parts of the network simultaneously, unified threat management (UTM) solutions create a single point of defence and, by providing a single console, make it easier to deal with a variety of threats.

What do I do if I have been the victim of a cyber attack?

If your files have been encrypted by this type of malware, you should immediately notify the relevant authorities and call in a security specialist to try to recover the information. Talk to us.

Ransomware - 7 Steps to avoid being held to ransom

There are several ways to protect your company against this type of threat and ensure business continuity. To find out how to keep your organisation secure, download the Cryptolocker Prevention Guide.

Written by:
Openlimits

Tell us what you think