Why are Malware and Ransomware so Scary? – The Reason Security Measures are Necessary
Date: 2021.09.03.
In Japan, a large-scale ransomware infection occurred in 2017.5.
This was the infection of a large corporation with supposedly perfect security.
Depending on the company, business continuity may become difficult due to the infection.
In order to prevent such a situation, we must consider malware countermeasures.
So, how do we minimize damage and what measures should we take?
This time, we will explain these two points.
What are malware and ransomware?
Malware comes in various types, such as Trojan horses, worms, and viruses.
Ransomware is also a type of malware.
Among them, ransomware is a troublesome type of malware.
Ransomware is a coined word combining “Ransom” and “Software”.
When infected with ransomware, you will lose access to your files and a message will appear demanding money to unlock access.
Of course, there is no guarantee that access will be unlocked even if you pay the money.
Because you cannot access the files, you will not be able to see important materials.
If it is a system server, the system will go down and you will not be able to conduct transactions with outside parties.
If malware countermeasures are insufficient, you need to consider taking action as soon as possible.
What happens if you get infected?
What happens if you get infected with malware or ransomware?
If infected, companies will suffer the following damage:
- Leakage of customer information
- Prolonged system downtime
However, the biggest problem is that the victimized company becomes a perpetrator who inflicts damage on customers.
Such an impact could lead to a loss of trust as a company.
What happens if you get infected with malware? Explanation of the case
“Major telecommunications company case (2019.12)”
An employee opened an attachment to a suspicious email and became infected with malware.
As a result, suspicious emails disguised as the employee were automatically distributed, and customer information was leaked outside the company.
In addition, malware using web browsers has been increasing recently.
- Infected by clicking on a web banner ad
- Infected when updating Adobe Flash Player
In this way, infections have been reported not only from email attachments but also through various other methods.
What happens if you get infected with ransomware? Explanation of the case
“Major electronics manufacturer case (2017.5)”
In 2017.5, the company detected that a server within the company was infected with ransomware.
The source of the infection was an inspection device in Europe.
The inspection equipment was running on an OS base.
However, it was not positioned as a server or PC, so they had not considered “security measures”.
Infected the company’s server in about 3 hours. Spread to all devices where vulnerability measures had not been taken.
It took about a week to restore the system, causing enormous damage.
Malware and Ransomware Countermeasures – Anti-Malware
The best thing is not to get infected with malware, but it is also necessary to consider how to respond in the event of infection.
Excerpt from “10 Major Information Security Threats 2021”
https://www.ipa.go.jp/security/vuln/10threats2021.html
We will check the measures and responses to prevent malware infection and what to do in the event of infection.
The measures and responses are as follows:
- Install anti-malware (security) software
- Keep the OS up to date (apply security patches)
- Back up regularly
- Design a BCP
We will check each one.
Install security software
Install anti-malware software.
If you have not installed anti-malware software, some are available for trial, so start considering installation immediately.
Back up regularly
Regular backups are essential.
For example, if infected with ransomware, the system can be restored by initializing the OS and recovering from a backup.
For that purpose, it is recommended to take regular (ideally daily) backups.
However, there may be many backup targets, or backups may not be possible. (
Because it is desirable to acquire backups during time periods when data is not updated or during time periods when services are not provided),
Design a backup schedule so that you can back up every day.
Keep the OS up to date
In the case of companies, it is necessary to confirm in advance whether the latest security patch will affect the system before applying it.
Verification will be performed on the test machine, but as a result, the application of security patches to the production machine may be delayed.
Design a BCP
BCP stands for Business Continuity Plan.
It is a plan to ensure business continuity in the event of a natural disaster or terrorist attack.
Until now, it was recommended to place server rooms in locations that would not be affected by natural disasters, assuming earthquakes and tsunamis.
However, terrorist attacks can cause damage anywhere, regardless of location, so the importance of BCP is being re-evaluated.
It is necessary to prepare a mechanism that allows business to continue.
Introduction of Anti-Malware (Security Measures) Can be implemented with the free version!?
There are many anti-malware (security measures) that can be used for free.
If you install free software, it will not cost you anything.
_ But will security be perfect? Here are the features of free offerings.
_ ・ Virus detection rate is inferior to the paid version _
_ ・ Security features are limited (mostly basic virus detection/removal functions only)
・ Ads are displayed
・ No support available
The free version of anti-malware (security measures) has many disadvantages, and the only advantage is that it is free.
It may be a good idea to introduce it on a trial basis for evaluation, but it is not perfect for use as a company.
To introduce anti-malware (security measures) in a company, the paid version is the only option.
Summary
As telecommuting increases, security measures are becoming more diverse.
In particular, in order to connect devices such as PCs taken out of the company to external networks, it is necessary to ensure security.
Until now, the information security department only needed to design security specifically for the company.
However, in recent years, it has become necessary to strengthen VPN connections and firewalls from outside the company.
And that alone is not enough to be considered a sufficient security measure in the current situation.
Let’s install anti-malware (security measures) software for complete security and make security perfect.
EXO Security – Anti-Malware Software
Above, we have explained anti-malware (security measures).
Anti-malware (security measures) software suitable for achieving this
We will introduce “Comprehensive endpoint security for corporations – EXO Security -“.
EXO Security is equipped with the following security functions:
- Anti-malware blocking technology
- Defend against new types of ransomware
- Block access to malicious sites
- Information leakage measures
- Program blocking
A free trial is also available.
The detailed URL is here.
Comprehensive endpoint security for corporations “EXO Security”
globalsupport@jiran.com globalsupport@jiran.com globalsupport@jiran.com globalsupport@jiran.com globalsupport@jiran.com globalsupport@jiran.com
