In May 2017, the WannaCry ransomware spread around the world in a matter of hours, locking files on hundreds of thousands of computers and disrupting the NHS. Years on, ransomware is still one of the biggest threats to small businesses, and the lessons from WannaCry still apply.
What is ransomware?
Ransomware is malicious software that encrypts your files so you can’t open them, then demands payment to unlock them. Many attackers now also steal a copy of your data first and threaten to publish it. Paying is no guarantee you’ll get your files back.
How it gets in
- Missing updates. WannaCry used a Windows flaw that Microsoft had already fixed two months earlier. Unpatched PCs were the victims.
- Phishing emails with malicious attachments or links.
- Stolen or weak passwords, especially on accounts without multi-factor authentication.
- Remote access left open to the internet, such as unprotected Remote Desktop.
How to protect yourself
- Keep everything updated – Windows, apps, routers and firewalls. Replace devices that no longer get security updates.
- Turn on multi-factor authentication for email, Microsoft 365 and every online service that offers it.
- Back up properly, with at least one copy that ransomware can’t reach, and test that you can restore from it.
- Use good antivirus on every device.
- Train your team to spot suspicious emails, and make it easy to report them.
For businesses, Cyber Essentials covers these basics and is increasingly asked for by customers.
Need help?
We help homes and businesses put these protections in place, from antivirus and updates to cloud backup. Call us on 01243 767399.
