Experts Insight On FBI Issues ‘High-Impact’ Cyber Attack Warning

The FBI's recent ransomware warning is a reminder that ransomware attacks remain a clear and present danger to organisations of all sizes. Since I created a vaccine to stop the NotPetya ransomware attack in 2017, hackers have evolved their strategies and continue to look for easy targets. And today the proverbial low hanging fruit includes municipalities, local and regional law enforcement agencies and colleges. They are all caught in the crosshairs.

With ransomware, attackers are either exploiting browser vulnerabilities or sending malicious attachments. Users should keep browsers and email clients updated and patched and every attachment should be treated with suspicion, especially if it is coming from an unfamiliar email address. I strongly discourage paying the ransom. Every ransom that's paid only encourages the attackers to conduct more attacks and up the ante each time. Organisations should understand and internalise that ransomware is a real threat and should prepare for it by performing constant system backups which will allow them to quickly get back on their feet once attacked. Organisations should also employ various security and anti-ransomware solutions in advance.

Ransomware is just another set of behavioural properties in software. Given the way they work and the way that endpoint technologies are advancing, especially with the combination of machine learning, ransomware can be stopped or at least slowed down. In the bigger picture, ransomware is still a relatively new threat and it takes time for the industry to develop the right solutions. An eager and willing industry will continue to develop solutions to tame the ransomware problem.