If you have not heard yet, a ransomware attack has occurred across the globe. It has already taken down servers in a Russian oil company and some multi-national shopping and advertising firms. It has also hit DLA Piper which is a global law firm with offices in Australia. DLA Piper have indicated that they have been affected overnight.
The attack encrypts files on computer hard drives making them incomprehensible and useless. The attackers then require you to pay money in order to decrypt your files. The issue only affects computers attached to a network - either hard wired with an ethernet cable or connected to Wifi. If your computer is connected to the internet, then your computer is at risk.
If you are attacked, think VERY carefully before paying any money. Often, attackers accept your money but then require you to pay more.
It is still early days yet, but this will probably reach further and further as time goes by. Here are some things that you can do to limit your chance of being affected.
- Update your anti-virus - AV companies are working hard to release patches for this so be vigilant and make sure you are getting those updates
- Windows Update - make sure you are getting Windows Updates so that your computers can be patched at the operating system level (see more here)
- Back Up - if you have a backup routine, do it. And when it's done, move that back up off your computer and put it on an off-line storage device like a DVD or USB. If you have a large backup, use an external hard drive. Again, when the back up is finished, unplug the hard drive and store it
- Use a file sharing service. Dropbox, One Drive, Google Drive are examples of sharing services and they integrate with your computer. These companies are experts in storage so reply on their expertise.
If you do get a message about being affected, unplug your computer from your network. If you are connected by network cable, unplug it. If you are connected via Wifi, turn off your computer's Wifi. Then take your computer to a reputable professional computer person.