5 Ways To Protect HR From Ransomware

Bad actors are now looking to hold for ransom sensitive information stored in personnel records in the human resources department and other highly sensitive corporate operations.

This past spring when news of the
Petya Ransomware
hit, security managers were concerned, but by and large the ransoms were typically in the range of a couple hundred dollars.
But now there are signs that ransomware attackers are going for bigger targets, and more money. Brian NeSmith, co-founder and CEO of Arctic Wolf Networks, warns that the value of the target is much more focused and the ransomware, more sophisticated. “When the ransomware hit a random desktop it was not for as much money,” NeSmith says.
A
report
recently released by Symantec found that the average ransomware demand jumped to $679 this year – up from $294 in 2015. According to the Symantec report, ransomware attacks peaked in March 2016 at about 56,000 and dipped under 40,000 by the next month.
Steve King, chief operating officer and chief security officer at Netswitch, says instead of encrypting one machine, the bad actors will potentially go after all of the company’s PII. King also warns that ransomware can now sneak into the network.
“In the old days -- which was three months ago -- ransomware would infect a machine when a user clicked on an email or a browser,” King explains. “Now, it can disguise itself as a normal tunneling activity, but then infect the network.”
King adds that that last thing a human resources department manager wants to hear is that all of the company’s PII is being held for ransom. Here are some tips from NeSmith and King on steps security managers can take to protect against ransomware infiltrating HR departments and enterprise networks in general:
1.
Cover the basics.
Companies should deploy very strong web filters and spam controls. Endpoint tools such as behavioral analytics and sandboxes help detect an invasion, quarantine it, and shut it down. And most importantly, have a data backup plan in which the offsite backup is not connected to the company’s network.
2.
User education.
Keep in mind that the vast majority of ransomware happens through employee errors. Employees need better guidance on what they shouldnt be clicking on or opening. Teach them only to open files with a .doc, .pdf, or .txt file extension. Circulate a whitelist and blacklist of documents that are fine to open and/or avoid.
3.
Detection and response.
Continuously monitor for malware and remediate it ASAP to reduce the probability of infection.
4.
Network segmentation.
Store the company’s most critical data on a different network segment and restrict access to that network segment and data.
5.
Set up a special workstation.
To protect the HR department, have the IT staff assign a dedicated laptop to an employee for the explicit purpose of reviewing resumes. And the IT staff should monitor that laptop more thoroughly than the average unit at the company.
Related Content:
How To Lock Down So Ransomware Doesnt Lock You Out
Big Business Ransomware: A Lucrative Market in the Underground Economy
NASCAR Race Team Learns Ransomware Lesson The Hard Way
Black Hat USA returns to the fabulous Mandalay Bay in Las Vegas, Nevada July 30 through Aug. 4, 2016. Click for information on the
conference schedule
and
to register.

Last News
▸ Criminal Possession of Government-Grade Stealth Malware ◂ Discovered: 23/12/2024 Category: security	▸ Senate wants changes to cybercrime law. ◂ Discovered: 23/12/2024 Category: security	▸ Car Sector Speeds Up In Security. ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
5 Ways To Protect HR From Ransomware