*****MAJOR GLOBAL RANSOMWARE ATTACKS*****

 

The development of science and technology during this past few decades brought several benefits for peoples, organizations, enterprises, and firms. However, tons of cyber threats are occurring these days. Ransomware is one of the family of malicious computer code that spread quickly and cause a crucial impact round the world. It attacks the victim’s device by infecting the malicious file into the device which can encode and deny the victim access to it. The victims are only allowed access once they pay the demand using cryptocurrencies like Bitcoin so that it can’t be traced back to the hacker.
Most common attacks happen on health care facilities like stealing patient data and medical report, etc. The target that ransomware like to target is user-wise and system-wise. "CyproLocker", "Locky", "Crypto Wall" are the example for this class which comes with the most widespread ransomware.                                                                              The spreading of the WannaCry attack caused $4 billion loss. It brings a great deal of impact and losses that might cause a worse condition to the economy, management, security, or politic of the entire world. The reason for this is that it would steal sensitive government data that might end up harming the whole world. There are several reasons that cause the ransomware attack round the world, for instance, the vulnerability of the system, weaknesses of security data. There are several ways to stop such attacks. Several solutions are offered by different specialists to avoid this.

# Leading causes of ransomware attack are as follows:

1)User Behaviour:

The way user handles the device most of the time is extremely carelessly. Most people share their account handle to anyone and keep very simple and easy passwords. Some users do not keep double verification for their account which may lead to easy access to hacker. So, the user is highly recommended to set a strong password with a different character and suggested to avoid connecting to an unknown public network because it might give open roadway to hackers. Sharing an account with others might invite the problem of attackers hacking into the system by exploring some weakness in the shared account. Thus, in all organizations people should be educated about how to keep their personal information safe from attackers.

2)Prevent the Clicking on Links or Attachment:

The attacker creates a crafted email to the victim and trick them into clicking on the attachment or links that contain malicious code. These malicious contents are of several kind with the link or attachment, for instance, PDF, ZIP, Word Doc or JavaScript form. These would possibly redirect them to another website and also the virus or worm would possibly enter from that loophole. The harmful file can unfold into the device before the victim understand they're clicking on a weird malicious website and commenced the trigger action like latched device, cypher file and program, stealing info and then on.

3)Lack of cyber security training:

Lack of education on cyber security threats on the web to common people is the main reason for the ransomware attacks. On a community level every college going student irrespective of what they are studying should be given basic education on cyber security and how to avoid being hacked.  

# Prevention methods:

1)Backup your Data:

Backup your information to an external disc or to the cloud server. Just in case of an attack the user can wipe out the pc data and make sure that the hacker gets no access to it. As the knowledge is already kept somewhere there is no probability of loss of information. One should try and backup their data every 2 days. A popular approach is to follow the 3-2-1 rule. Try and keep three separate copies of your data on two completely different storage units with one copy offline.

2.Keep all Systems and software Updated:

Always keep the package, application program, antivirus, and different software system used updated to the newest version available. Malware, viruses, and ransomware can perpetually evolve with new variants and kinds that may bypass your previous and not updated safety features. Several attacks targeted computers with out-of-date versions of Microsoft Windows. Since this incident, security consultants worldwide have urged firms to update their systems as shortly as attainable.

3)Install Antivirus Software and Firewalls:

Comprehensive antivirus and anti-malware software are the most common ways in which one can defend against ransomware. They will scan, detect, and answer Cyber-attacks. However, user additionally needs to put together their firewall since antivirus code solely works at the interior level and may only notice the attack once it's already within the system. Firewalls units are typically the primary line of defence against incoming, external attacks. It will shield against the software hardware-based attacks. Firewalls are extremely essential for any business and non-public network. They will separate out and block suspicious information packets from getting into the system.

4. Network Segmentation

As ransomware can spread quickly throughout a network, it is very important to limit the spread as much as possible in the event of an attack. Thus, data has to be segregated into parts on the network so that even if one is harmed the others stay protected.

5)Email Protection:

Do not open emails from unknown senders, change password regularly, have 2 step verification process and send attachment to anyone in read only form.

6)Limit User Access Privileges:

Another way to protect user network and systems is to limit user access and permissions to only the data they need to work. By doing so, user can prevent ransomware from spreading between systems within a computer network.

7)Run Regular Security Testing:

Always try to identify any bug in user’s device, create new security protocols, run regular scans of the entire device thru anti-viruses

8)Security Awareness Training:

Train every person working in any industry on cyber treats and how to tackle them. Make sure the organization arranges regular cyber analysis session so that the employees are updated on the latest issues related to cyber-attacks.

Some basic security training practices to provide are:

• Safe web surfing
• Creating strong, secure passwords
• Using secure VPNs (no public Wi-Fi)
• Recognizing suspicious emails or attachments
• Maintaining updated systems and software
• Confidentiality training
• Providing an emergency reporting channel for suspicious activity