Ransomware is a malicious program that gains access to a computer, blocks access to the device and requests a ransom fee to be paid in order to regain access.
This type of technology isn’t new and ransomware continues to evolve. The newest evolution of ransomware is ransomware-as-a-service (RaaS). “Ransomware-as-a-service (RaaS) is an arrangement between an operator, who develops and maintains the tools to power extortion operations, and an affiliate, who deploys the ransomware payload. When the affiliate conducts a successful ransomware and extortion attack, both parties profit.” (Microsoft Security, 2022).
How can you protect your organization from a RaaS attack? Here are some steps that have been recommended by Microsoft Security:
Prepare for Recovery
To ensure that you won’t have to pay a ransom for your data, it is crucial that you not only conduct regular backups of your systems but also ensure that those backups are protected. If possible, it is best to store the backups fully offline, off-site, or in an online immutable storage. Being prepared will cost less than paying the attacker ransom.
Harden Internet-Facing Assets
It is best to use threat and vulnerability management capabilities in your endpoint detection. Attackers look for vulnerabilities in your system, this is why it is important to prioritize and get rid of any vulnerabilities.
Evaluate the Perimeter
Ensure that as an organization any perimeter system an attacker could use to access the network is secure.
Close Security Blind Spots
Performing regular network scans and verifying that all security tools are running in optimal configuration is important when protecting all systems from attackers.
Reduce the Attack Surface
To prevent common attack techniques, it is best to establish ‘attack surface reduction rules’. See attached PDF below for more details.
Harden the Cloud
If your organization stores information in the cloud, it is more important now than ever to ensure that your resources in the cloud are secure. This can be done by hardening security identity infrastructure and using multifactor authentication (MFA).
Audit Credential Exposure
Regularly auditing and reducing administrative privileges to those who need it most, helps to prevent ransomware attacks and cybercrime.
Build Credential Hygiene
Limiting lateral movement by implementing a logical network segmentation based on privileges can help keep your organization safe.
At pavliks.com, we are experts in securing your organization and helping you stay safe from RaaS attacks. We’re here to assist you with products like Microsoft Azure, that ensure your data remains safe and secure in the cloud.
Contact us to learn more about how you can protect your business: https://www.pavliks.com/contact-us
Microsoft Security. (2022). Ransomware-as-a-service: The new face of industrialized cybercrime.
