How to protect your company?

Recent attacks on the information systems of press and telecommunications groups in Portugal have become a warning for national companies, notably on the importance of IT security measures.

What did the recent attacks on press groups involve?

According to cybersecurity experts, this type of attack is called ransomware.

According to the latest information, a group of attackers gained improper access to the organization’s internal network and, using valid credentials obtained criminally, took control of the AWS Cloud account. The group of attackers (also called hackers) accessed data of subscribers of the digital platform of one of the targets, specifically identification and contact data associated with the login, such as name, email and phone number. However, there was no evidence of access to passwords or credit card data.

What is Ransomware?

This attack is a malware that encrypts the files on the attacked computer and can even prevent access to them until a ransom is paid.

The big challenge is that this type of attack spreads across several computers or storage devices connected to the same network. Typically, it follows a simple, predictable process consisting of sending an email to an employee to click on a certain link or gaining access to a computer that is more vulnerable from a security point of view. That is why it is so important to train employees in cybersecurity and to have contingency plans for similar situations that allow a rapid response in the event of an attack or attempt.

Is my company vulnerable?

Yes! There are several factors that can make your company a target for ransomware attacks, among which we highlight the following:

• Non-advanced technology devices (desktop computers, laptops, mobile phones, tablets, IT systems…);
• Devices with outdated software;
• Equipment with discontinued operating systems for which the manufacturers no longer send updates (usually security updates);
• Lack of an adequate contingency plan (backups);
• Low investment in cybersecurity equipment and no concrete plan;
• Lack of training for the companies’ own employees on good IT security practices;

How do I protect my company against Ransomware?

• Make sure IT equipment is updated with the latest software versions;
• Never click on unsafe links from unknown senders;
• Avoid disclosing personal information;
• Do not open attachments from suspicious emails;
• Never use unknown USB flash drives;
• Only use known download sources (check that the link starts with “https”);
• Use VPN (Virtual Private Network) services on public Wi-Fi networks;
• Hire cybersecurity specialist companies to train employees;
• Carry out check-ups on the company’s IT systems and configuration.

In short, acquiring good IT systems and creating a cybersecurity culture in your organization are the key factors in reducing risk in the event of attempted cyberattacks.

There are no infallible systems, but how the business recovers is critical and decisive to minimize losses!