How do you protect yourself from ransomware? The ransomware currently sweeping the world is known as Petya, NotPetya and SortaPetya. Similar to the WannaCry virus in May 2017, this virus penetrates computer networks and encrypts all files. The files are then permanently unusable and are supposed to be decrypted again for a ransom.
How do you protect yourself against ransomware?
How the "vaccination protection" against ransomware works
Security researcher Amit Serper has found a way to protect computers from infection with this ransomware. This time it is not a "killswitch" but works like a vaccination. When infected, the virus installs certain files on the computer, which then take control. You counteract the infection by practically pre-empting the virus in this step. You create the files with the corresponding extensions yourself, but then only make them readable (read-only) and not editable. If the virus then enters the system, it finds the file extensions already present and "believes" that the computer is already infected. As the self-created files are not editable, the virus cannot use them for its own purposes.
How to activate vaccination protection
How to protect yourself against ransomware: Batch file to download for easy activation
Instructions for activating the protection
(Of course, you should never just open anything you download from the Internet if you are not sure that it comes from a safe source. This is the reason why you should open the file with "Editor" first. That way you can see what it says).
Right-click on the downloaded file and click on "Run as administrator" after you have read it in the editor.
The batch file creates the three dummy files needed to stop the Not-Petya ransomware/virus from installing on your system.
How to protect yourself against ransomware: Read the most important rules below.
Never pay a ransom
In the meantime, the system for restoring encrypted files has been deactivated, so it makes no sense to pay a ransom. However, it is also important for future cyberattacks that such ransomware is as unprofitable as possible. Important to know: Paying a ransom is not a solution to the problem and only encourages the hackers. How do you protect yourself against ransomware so that you can't be blackmailed in the first place?
The two types of ransomware
Encryption ransomware. It contains specific and complicated encryption algorithms designed to make files unreadable. Victims are asked to pay to obtain the key that can decrypt the blocked content.
Locker ransomware. Locker ransomware locks the victim out of the operating system and makes it impossible to access the desktop and any apps or files. Victims have to pay to unlock their data.
How to protect yourself against ransomware: the most important rules
Create regular and multiple backups
Backups are by far the best way to protect yourself from ransomware attacks.
For each backup, it is crucial to create multiple copies of the files and store them on different media. Each of these backups should be stored separately in a different location. Ideally, one should be kept offline (on a secure external hard drive), and another could be left on a secure and private cloud service.
Avoid leaving the backup medium (e.g. external hard drive) connected to the computer system after a backup. In the event of an infection of this system, it would be included in the perimeter of the data affected by the attack and the backup would be useless.
Use the latest software
Software updates often contain "security patches" designed to fix vulnerabilities that hackers could exploit to launch cyberattacks (including ransomware attacks).
For this reason, it is important to download updates for these software, devices and peripherals immediately after being informed of their existence. This is because hackers now also know that the device or software in question has a vulnerability.
Avoid all spam
Many ransomware attacks are initiated through phishing, spear phishing or whaling emails or smishing. And often, victims allow the ransomware to infiltrate their computer, phone or computer system by downloading an attachment contained in these messages.
For this reason, you should only open attachments and links that come from genuinely trustworthy sources. Never click on a link in an e-mail! Even a seemingly harmless remark such as "Click here to unsubscribe/unfollow" can conceal dreaded ransomware.
