University at Buffalo (UB)
Protect yourself against Ransomware
Published October 1, 2021
by Orly Stein
Ransomware infects your devices, encrypting personal data and holding it ransom. Once infected, unless you’re willing to pay an exorbitant sum, you may never see your files again.
Ransomware is devastating, and becoming alarming common. That’s why it is crucial to learn how to prevent ransomware attacks and protect yourself before you are a target.
How does ransomware spread?
Ransomware is rarely individually targeted. Instead, attackers usually acquire a list of emails or websites and send phishing messages with malicious links or infected files. Some ransomware attacks also exploit operating system vulnerabilities.
Ransomware can also access your email and impersonate you to spread the malicious software to your contacts.
How can I stay safe?
- Update your software, including your operating system. These updates will fix dangerous vulnerabilities.
- Be cautious with emails. Take care when clicking a link or opening an attachment. Don’t forget that scammers can impersonate others, even people you know personally, via email.
- Install security software—UB staff, faculty and students can download free anti-virus software from the UBIT website—and keep it updated.
- Backup your data, downloads and configurations.
What should I do if I've been infected with ransomware?
- Report it. Contact UB’s Information Security Office, or contact your distributed IT support, immediately.
- Isolate the infected system. Disconnect and turn off the infected devices, and take the connected network offline so technical experts can identify the attack, prevent reinfections, and stop it from spreading.
- Assume all personal information was compromised. Change any usernames and passwords for accounts you might have logged into from the infected machines.
Attacks in real life
Although it might seem far-fetched that criminals would hold your personal information ransom, ransomware attacks are frequent.
The most famous and devastating ransomware attack in history, WannaCry, attacked devices in 116 countries in 2017. It was designed so that, once someone affected a single device on the network by clicking a malicious link or files, it spread quickly and automatically to other devices on the same network.
In 2016, a ransomware attack called TeslaCrypt targeted files stored on local drives. TeslaCrypt made up 48% of ransomware attacks in 2016 and it was impossible to restore the files.
Stay safe
October is National Cyber Security Awareness month. Get more tips for keep yourself, your devices and your personal information safe on the UBIT website.