Guidance For Defending And Responding To Ransomware Attacks

Ransomware attacks are a significant and increasing threat to organizations of all kinds. The U.S. Federal Trade Commission recently issued guidance regarding ransomware attacks. Organizations should consider that guidance and take appropriate steps to defend against, and prepare to respond to, ransomware attacks.

Ransomware

Ransomware is malicious software that prevents access to or use of an infected information technology device or system (an "IT Resource") or related data, and demands (typically through an on-screen warning or other form of ransom note) that a ransom be paid (often in virtual currency or other forms of untraceable payment) to obtain a key to restore the infected IT Resource or data. There are two basic kinds of ransomware: "locker" ransomware (which prevents use of an IT Resource by locking the user interface) and "crypto" ransomware (which encrypts specific files or data so they cannot be used without the required decryption key).