SecurityThe threat posed by ransomware
How badly is the German economy affected by cyberattacks using ransomware? What makes companies vulnerable and how do they react to ransomware attacks? The Alliance for Cyber Security examined this in a public survey.
... ... the fact that they usually have access to much more data than they need doesn't make things any better," says David Lin, Enterprise Sales Manager at software company Varonis Systems. In addition, few companies monitor the activities of their employees on file shares, i.e. the large file repositories targeted by newer ransomware variants. "It's almost impossible to get a grip on what you don't know about. Detecting ransomware without controlling the use of file shares is extremely difficult," says Lin. In addition, most companies do not document who changes (or encrypts) which files and when. After a ransomware attack, an enormous amount of work is required to ensure that nothing has been lost. Entire file shares often have to be deleted and replaced with backups.