~/joshua-eom
← All posts

Ransomware: A Life-Altering Threat

1,308 words6 min read

Originally published on Medium ↗

On this page
  1. What is Ransomware?
  2. What is Phishing?
  3. 7 Essential Steps to Prevent Ransomware and Phishing
  4. 1. Require multi-factor authentication
  5. 2. Strengthen your passwords
  6. 3. Don’t use the same password for other accounts
  7. 4. Use anti-virus
  8. 5. Update software
  9. 6. Backup your data
  10. 7. Learn to identify phishing/spam
  11. Works Cited

It was Friday, May 7th, 2021 when Colonial Pipeline became the victim of a horribly successful cyber-attack. The company discovered a ransomware attack, and operators immediately shut down the entire pipeline, thus causing a widespread gasoline shortage across the east coast. The attacks demanded a ransom of nearly $5 million in Bitcoin for the software decryption key required to restore Colonial Pipeline’s disabled computer network.

This recent event is now considered to be one of the most momentous cyber-attacks in history, as it has now opened many conversations relating to cyber security. Many people see this attack as a wake-up call for the U.S. to put more money and effort into making sure its networks are secure. (Turton)

For more information about this breach, visit here:

What is Ransomware?

So, what exactly is ransomware?

Ransomware is a type of malicious software or virus designed to block access to a computer system until a sum of money is paid (Crawley).

This danger has recently grown to a universal issue for the entire globe. Ever since the start of the COVID-19 quarantine, many individuals have entered the digital realm of the internet. You may find that technology is very convenient and essential in everyday lives, but we must understand the dangers of joining the internet.

Under here is an infographic that displays the nuclear effect of ransomware.

An infographic that displays the effect of Ransomware An infographic that displays the patterns of Ransomware

Ransomware can’t enter your systems unless you let them in. Confusing? Let me explain…

What is Phishing?

Phishing? Sounds like fishing. Well…you’re not far from the truth.

Hacking ph(f)ishing for your personal data Hacking ph(f)ishing for your personal data (Matthews)

“Phishing is a cybercrime in which a target or targets are contacted by email, telephone or text message by someone posing as a legitimate institution to lure individuals into providing sensitive data such as personally identifiable information, banking and credit card details, and passwords.” (“What is Phishing?”)

So in this case, the people are the fish and the fishers are the bad actors using bait to lure you to a trap.

Most malicious actors use this method to get into your devices and insert malicious software such as ransomware or spyware. This blog aims to teach you how to sway away from phishing attacks and know how to recover from an initiated attack.

Phishing is still prevalent to this day and the only way to protect against them is to understand how they operate.

Especially during the COVID-19 pandemic, phishing attacks soared to a whopping 220% increase which peaks as cybercriminal opportunism intensifies (Warburton).

And if you think your mobile devices such as iPhones or Androids are not vulnerable to these sorts of attacks, you’re wrong!

Even our mobile devices have received an increase in ransomware attacks by over 100% (Humayun, et al. 111).

Think about how you install apps on your phone. How can you trust that the developers didn’t add additional functions to monitor what you’re doing? Or even worse, steal your personal information?

7 Essential Steps to Prevent Ransomware and Phishing

Now that I’ve opened your eyes to the importance and dangers of ransomware and phishing, I’m here to teach you what you can do to prevent them.

There are many resources that provide personal applications to secure yourselves and even companies from the dangers of living on the internet.

I’ve curated a list of 7 essential steps in order to increase your security and lessen your chances of becoming a victim to ransomware/phishing attacks.

1. Require multi-factor authentication

Where the user must provide two or more pieces of evidence to verify their identity to gain access to an app or digital resource.

To secure yourself significantly more, you can use your phone, fingerprint, face ID, email, authenticator apps, or other personally identifiable information. So, even if a hacker discovers your password, there is a second wall protecting against being fully compromised. (Shelton)

2. Strengthen your passwords

Now even if you apply multi-factor authentication, you should still make your passwords stronger. That way, the hackers won’t use your weak passwords against other apps or accounts because people are known for using the same password for every account. (Stahl)

3. Don’t use the same password for other accounts

Segwaying into the following essential is to avoid using the same password for other accounts. I recommend that you use a password manager (e.g. LastPass, Apple Keychain, Bitwarden, etc.) that essentially stores your passwords and can generate powerful ones for you. All you have to do is remember one strong master password that provides access to a database of all your other passwords. (“The Risks of Using the Same Password for Different Accounts.”)

4. Use anti-virus

The anti-virus’ job is to identify and mitigate malicious software in your devices. But keep in mind, this is only to protect you if the malicious software is ALREADY in your systems. So this is the second level of defense if you end up victim to one. (Alameda)

5. Update software

You want to update anything such as OS, apps, anti-virus, and firmware. As time passes, people discover new vulnerabilities and exploits used to take advantage of your systems. So keeping your systems updated can mitigate the risks of recently emerging vulnerabilities. (Symanovich)

6. Backup your data

Backing up your data is basically storing a copy of all your data into another storage space. So if the ransomware system accesses your files and encrypts them, you have another copy in hand to save you! You can also use cloud services like OneDrive or Google Drive to back them up in a very secure location. (Griffith)

7. Learn to identify phishing/spam

Understanding the standard structure of phishing attempts is essential. Knowing how the malicious actor thinks and acts will make it easier to identify and stop the threat from pursuing their goals. Then you can pat yourself on the back for succeeding in doing so! (“How to Spot Phishing Emails: 7 Helpful Tips for Employees”)

In conclusion, cyberattacks should be a call to every industry to see the importance of cybersecurity to avoid any significant casualties in the future. As the digital landscape evolves, the security infrastructure should follow it. Enforcing education in security throughout all professions is also an essential procedure in mitigating any further threats. Cyber threats are experiencing an ever-growing appearance, especially in the digital age as we undergo social distancing, so it is crucial to put security in all our minds as we progress in the cyber industry.

Works Cited