Data key

Irish businesses suffer in ransomware attacks

Pro
(Source: Stockfresh)

22 April 2014

Irish businesses are being attacked with ransomeware that encrypts files on computers and for the purpose of extorting money.

According to researchers at ESET Ireland, businesses have been attacked in Westmeath, Wexford, Waterford, Galway, Donegal, with mostly small businesses being targeted and an average of 15 machines each being affected.

The most common piece of malware involved is also one of the most malicious, according to ESET. Cryptolocker malware targets computers running Windows operating systems and can be passed on via en email attachment.

Filecoder malware encrypts all Word, Excel, PDF and other files. The cybercriminals usually request the ransom to be paid in Bitcoin and the average amount required is between $300 (€217) and $500 (€362). A 2013 UK survey showed 41% of those attacked decided to pay the ransom and Bitcoin traffic associated with accounts related to ransomware showed cybercriminals made in excess of $20 million (€14.5 million) per month.

ESET said that what most of the affected companies had in common was that they had poor security and partial or no antivirus software in place. Several suspect their infection came from an email attachment. In most cases, single computer was infected and this initial infection led to the spread of the malware across network shares. Many of these companies also did not have their data backed up, so some decided to pay the ransom to retrieve their files.

The security specialist recommends some specific actions in tackling a ransomware attacks.

ESET recommends contacting a computer professional instead. The company recognises the fact that decryption may not be possible, but, it maintains that consulting an IT professional should be the first option.

Secondly, it warns not to think that by getting past the lock screen, the infection is gone. “It is sometimes possible to get ‘past’ the lock screen displayed by some forms of ransomware, but that does not mean you’re safe.”

“Your computer is probably still infected. Unless you have in-depth knowledge, don’t get your hopes up, as many use strong encryption which is basically impossible to break. Either invest in proper AV software or contact an IT professional for help,” says ESET.

The myth that a good back-up regime makes a business immune to such attacks was also dispelled.

“Filecoders rely on one thing: that you keep unique, precious files on your PC,” said ESET, “don’t.”

The company recommends appropriate back-up for usage patterns, ensuring that businesses have the right measures in place, backing-up the right data.

In combination, these measures can mitigate against the risk of any such malware attack.

 

TechCentral Reporters

Read More:


Back to Top ↑

TechCentral.ie