Ransomware: trends and how to defend yourself
Read the original in Spanish →
ransomware is a type of malware that encrypts data and demands a ransom in exchange for the decryption key. It is one of the biggest threats to cybersecurity today and is constantly evolving.
In this article we will look at 6 ways ransomware is evolving and how to defend yourself:
1. Focus on data blackmail
Ransomware groups are increasingly focused on data blackmail. Instead of encrypting the data and demanding a ransom, they steal the data and threaten to post it online if it is not paid.
To protect yourself from data blackmail you must ensure that your data is backed up and encrypted. You should also have a response plan for a data breach.
2. Benefit from data monetization
The ransomware community also sells stolen data on the dark web. This is a lucrative business and one of the reasons ransomware attacks are increasing.
To protect yourself from data monetization it is important to ensure that data is well protected and encrypted, and to be aware of the latest security threats and take steps to mitigate them.
3. Attack on endpoints in the cloud
More and more organizations are migrating to the cloud and ransomware groups are following suit. One example is that they are targeting endpoints in the cloud, such as servers and databases, because they know that these systems are critical to businesses.
To protect cloud endpoints, you must ensure that they are properly configured and patched. A cloud security solution can also be used to monitor and respond to threats.
4. Attack on unusual platforms
Ransomware groups are also targeting uncommon platforms, such as industrial control systems and medical devices. These systems are often critical to businesses and organizations and are not as protected as traditional computer systems.
To protect uncommon platforms it is vital to ensure that they are properly configured and patched and have a response plan to a ransomware attack.
5. Scaling through automation
Attackers are using automation to scale their attacks which means they can attack more organizations at once and increase their chances of success. Penetration of a system, the most costly stage of a ransomware attack in terms of time and effort, can now be simplified.
To protect yourself from automated attacks, you can use a security solution that is capable of detecting and responding to threats quickly using AI and machine learning. It is also recommended to pass penetration tests periodically.
6. Exploitation of zero-day vulnerabilities
Zero-day vulnerabilities are security flaws that are unknown to the manufacturer. Ransomware groups are increasingly exploiting these vulnerabilities to attack their victims.
To protect yourself from zero-day vulnerabilities, it is important to keep your software up-to-date and have a security solution that can detect and respond to zero-day attacks based on detection of suspicious behavior.