ActiSoft Technology - Blog #RansomwareActiSoft Technology - Blog #Ransomwarehttps://www.actisofttechnology.com/blogs/tag/ransomwareThu, 23 Apr 2026 07:46:55 +0200http://zoho.com/sites/<![CDATA[Top Cyber Threats to SMEs]]>https://www.actisofttechnology.com/blogs/post/top-cyber-threats-to-smes-in-2022....and-more-than-likely-beyondIf you’re running a small to medium sized business, it’s easy to think that you might not be a big enough fish to attract the interest of cyber crimin ]]>
If you’re running a small to medium sized business, it’s easy to think that you might not be a big enough fish to attract the interest of cyber criminals. But the truth is, small organisations are just as much at risk of hacks and other security threats as huge corporations – in fact, being smaller may make you more of a target. 

Attackers are targeting thousands of businesses every day, and those with less robust defences in place make much easier prey than bigger organisations who can invest more time and money into cyber security. 

Hackers also love targeting small businesses because they often deal with large sums of money and have great contacts – which means there’s lots of lovely data to steal.

It's often said that knowledge is power, and that’s certainly true when it comes to cyber-crime. The owners and managers of SMEs need to be aware of the risks, which is why we’ve put together this short article outlining the most common cyber-attacks right now and what we have seen.
1) Phishing 

By far the most prevalent – and damaging – threat facing small and medium sized businesses in 2022 is phishing. These attacks account for 90% of all breaches; a figure that’s grown by 65% since 2021. Phishing attacks are when a hacker sends an email pretending to be from trusted contact, tricking the recipient to click on a malicious link, download a code or share sensitive information. There are several types of phishing attacks you need to know about:

  • The spray and pray approach, which is where hackers send out thousands of emails all at once, in the hope that one or two will bite
  • Spear phishing: a campaign that targets a particular person or organisation and includes information which is known to be of interest to the specific target
  • Whaling: an even more targeted and carefully executed attack, where the hacker goes after a specific C level executive in the organisation 

Phishing attacks are becoming increasingly sophisticated, which means that even if you think you’ve seen it all before, you could still be caught out.
2) Ransomware 

Ransomware is a type of malicious software which prevents or restricts users from accessing their computer systems and data, commonly by locking their screens and/or files until they pay a ransom. Like other cyber-attacks, ransomware technology has become more sophisticated over recent years. A popular attack at the moment is a breed of ransomware known as “cryptoransomware” where files are encrypted and users are forced to send an online payment in return for a decryption code.

Hackers will push for payments in all sorts of ways, though. The costs vary according to the type of ransomware being used and different exchange rates. Users are often asked to pay their ransoms in bitcoin, because it offers a greater level of anonymity, but hackers also list alternative options such as Amazon gift cards or iTunes vouchers. Sometimes it seems like an easy option to just pay up, but it should be noted that paying the ransom is no guarantee your files will be returned.
3) Social Engineering 

Social engineering plays a huge role in cyber-crime. Even though advances in technology have been behind more sophisticated attacks, those attacks can only be properly deployed by a human. So, hackers work hard to understand how people think and manipulate them into making security mistakes or sharing valuable data. Social engineering happens in several phases. First, the hacker investigates their victim and identifies any weaknesses in their security systems. Next they start to gain their trust, either by sharing information the victim might be interested in or by pretending to be a trusted contact. Then, when the target lets their guard down and begins to trust the hacker, they’ll go in for the kill. 
4) Insider Threat 

Insider threats are posed by individuals from inside an organisation. This can include current or previous staff members, partners and contractors with access to passwords and company data. These individuals may act maliciously, intentionally stealing data or infiltrating systems for personal gain, but often they’re completely unwitting. Lack of awareness about cyber security issues can turn the most diligent worker into an insider threat, so it’s important to have robust policies and training measures in place. 
5) Shadow IT

Shadow IT is a term covering the use of different IT systems, apps, services and devices that haven’t been approved by an IT department. Since Cloud services have become more popular, and also since the first lockdown, the use of Shadow IT has grown exponentially. New technology drives innovation and can deliver huge cost and time savings, but without the right security measures in place it also poses a huge risk.


6) Software Exploits

A software exploit is a code that’s been written to take advantage of a particular vulnerability or flaw in a piece of software. Although security professionals sometimes develop these exploits as evidence of vulnerabilities, they’re also widely used by hackers with malicious intent. 


The purpose of this article is to provide you with an overview of the most common threats to your organisation. We’ll go into more detail about each type (and a few others!) in our next articles. In the meantime, if you want to know more about how to protect your SME from cyber threats, get in touch!

Are your users putting a big target on your organisation’s back?

Cybercriminals are constantly coming out with new ways to hack into your network and steal your organisation’s confidential information.

Find out if your users are putting a big target on your organisation’s back.

KnowBe4’s new Password Exposure Test (PET) is a complimentary IT security tool that allows you to run an in-depth analysis of your organisation’s hidden exposure risk associated with your users.

PET makes it easy for you to identify users with exposed emails publicly available on the web, and checks your Active Directory to see if they are using weak or compromised passwords that are part of a known data breach. PET then reports on any user accounts affected so you can take action immediately!

Here's how it works:

  • Checks to see if any of your organisations email addresses have been part of a data breach
  • Tests against 10 types of weak password related threats associated with user accounts
  • Checks against breached or weak passwords currently in use in your Active Directory
  • Reports on the accounts affected and does not show/report on actual passwords
  • Just download the install, run it, get results in minutes!
    Identify how many users take the bait and reply before the bad guys do! 
    Try It Now!
    ]]>    Fri, 10 Jun 2022 11:13:34 +0000    <![CDATA[In Order to Have Good Security Culture, Behaviour Comes First]]>https://www.actisofttechnology.com/blogs/post/in-order-to-have-good-security-culture-behaviour-comes-firstBlog courtesy of KnowBe4 Written by Javvid Malik In our efforts to raise awareness among users of the importance of cybersecurity and the part they have ]]>
    Blog courtesy of KnowBe4

    Written by Javvid Malik

    In our efforts to raise awareness among users of the importance of cybersecurity and the part they have to play in it, we sometimes go about things in a long-winded manner.

    Many times, organisations spend a long time trying to convince people why they should take security seriously. They will come up with elaborate explanations as to why reusing passwords is a bad idea, or how the Wi-Fi in their favourite coffee shop could lead to their demise, or how minting NFTs will cause the world economy to collapse. 

    This does work in many cases. You inform someone of the underlying reasons and the broad impact of their actions > they understand and change their behaviours accordingly > this leads to better security and everyone lives happily ever after. 
    But this approach does not work on everyone, and is not the most effective in all scenarios. 

    So what do we do?

    We start with the behaviour. 
    Consider the introduction of recycling bins. Yes, they are for the good of the environment, to prevent the ice caps from melting and to save polar bears. But is that what everyone is thinking about when they sort out their rubbish? In many cases, that is not the case. The fact that packaging usually mentions whether it can be recycled, and the provision of recycling bins next to general waste bins, makes it an easy and almost seamless behaviour to adopt. 

    Some people may not even be aware that recycling can potentially benefit the environment. But they will justify their doing so in their minds. 

    Give people a reason and they may not supply the behaviour. But give people a behaviour, and they will have no problem supplying the reasons themselves.

    This is where building a strong security culture within an organisation can have massive benefits, like when people observe most of their colleagues behaving in a certain way. For example, they see everyone wearing their pass at all times and locking their workstations when away from it – they will adopt those behaviours too. 

    Will they understand all of the reasons? Probably not. But as long as they adopt the right behaviours, that goes a long way in reducing risk, which is ultimately what we want. 

    Behaviour comes first – attitude changes to keep up.

    How Security Culture Invokes Secure Behaviour

    In this ground-breaking new research, KnowBe4 has been able to validate the link between security culture and secure behaviour. Though it has been suspected that the two are intertwined, until now, it has never been proven with data. Improving one's security culture directly translates into more secure employee behaviours and to the overall reduction of organisational risk. 

    In this whitepaper, you'll learn how to impact secure behaviour through:
      • Intentional focus on the organization’s security culture
      • Shared ideas, customs and social behaviours
      • Internalising an individual's responsibilities to protect and defend
      • Security readiness and the effectiveness of the human layer.
    Get the Report
    ]]>    Fri, 21 Jan 2022 15:54:04 +0000    <![CDATA[Hive Ransomware-as-a-Service Races to the Top as Affiliates Breach 350 Organisations in Just 4 Months]]>https://www.actisofttechnology.com/blogs/post/hive-ransomware-as-a-service-races-to-the-top-as-affiliates-breach-350-organiations-in-just-4-monthsBlog courtesy of KnowBe4 Written by Stu Sjouwerman A mere blip on the ransomware radar a quarter ago, the massive onslaught of attacks using Hive Ransom ]]>
    Blog courtesy of KnowBe4

    Written by Stu Sjouwerman

    A mere blip on the ransomware radar a quarter ago, the massive onslaught of attacks using Hive Ransomware demonstrates how dangerous the “as-a-Service” model really is.

    If you looked at the industry data a quarter ago, Hive ransomware only represented 2.5% of all attacks. But this up-and-coming new ransomware variant is a blueprint of just how easy it can be for affiliates to setup shop, download the ransomware, and collect on their bounty.

    According to a recent look into the Hive by security researchers at GroupIB, the Hive is making ransomware easy. Affiliates can generate a unique version of the ransomware in less than 15 minutes, victim companies can be registered into the Hive’s backend (much like a software partner registering a customer in a partner portal to ensure the deal is attributed to the partner), and transparency is key; with the Hive making sure all communications with victims also visible to affiliates.

    Source: The Hive Affiliate Program home page

    This is a well-oiled machine. And that’s scary.

    Hive is responsible for the single largest ransom demand to date - $240 Million – made in November of last year to electronics retail giant MediaMarkt. This should tell you that the Hive is only going to grow its’ operations and be a formidable tool in the belt of affiliate cybercriminals.

    The good news is Hive attacks traditionally use spear-phishing attacks as their initial attack vector. This means that effective Security Awareness Training can do a lot to thwart phishing attacks that use social engineering tactics to trick victims into engaging with malicious loaders that will, inevitably release the Hive.

    Be on the watch for this one… it’s going to sting.

    Free Ransomware Simulator Tool

    Threat actors are constantly coming out with new strains to evade detection. Is your network effective in blocking all of them when employees fall for social engineering attacks?


    KnowBe4’s "RanSim" gives you a quick look at the effectiveness of your existing network protection. RanSim will simulate 22 ransomware infection scenarios and 1 cryptomining infection scenario and show you if a workstation is vulnerable.
    Here's how it works:


      • 100% harmless simulation of real ransomware and cryptomining infections
      • Does not use any of your own files
      • Tests 21 types of infection scenarios
      • Just download the install and run it 
      • Results in a few minutes!
    Get RanSim!
    ]]>    Tue, 11 Jan 2022 15:46:20 +0000    <![CDATA[How to Run a Successful Security Awareness Training Program]]>https://www.actisofttechnology.com/blogs/post/how-to-run-a-successful-security-awareness-training-programBlog courtesy of KnowBe4 Written by Stu Sjouwerman As we're now in Cybersecurity Awareness Month, thinking about how to strengthen your security awarene ]]>
    Blog courtesy of KnowBe4

    Written by Stu Sjouwerman

    As we're now in Cybersecurity Awareness Month, thinking about how to strengthen your security awareness training program is probably top of mind.

    Luckily, we've got you covered with helpful tips you can use to run a strong security awareness training program in your organisation! We asked our Security Awareness Advocates for their expert advice on questions like how to get started, how to motivate your users, and how to develop a strong security culture over time. While not an exhaustive list, here is a handy one-sheet with what they had to say:

    Click here to download the full infographic

    Critical components of a successful security awareness program:
      • Use good, high quality content that’s highly relevant to your users
      • Reinforce the training with regular simulated phishing attacks
      • Stay current with what is happening in real phishing attacks - mirror the topics and methods used by cybercriminals
    How to motivate your users to do their training on time:
      • Lead with a carrot, not a stick! Reward users upon completion (could be a sticker, certificate, raffling off a gift card, etc.)
      • Make it a game and create healthy competition between departments or other groups
      • Get your leadership involved publicly - make sure it’s well known and seen. It will make the rest of the organisation want to follow in their footsteps
    How to gain and maintain executive support for your security awareness program:
      • Speak their language: Don’t get too technical, and tie it to business objectives (risk, reputation, business benefits, profit and loss impact, etc.)
      • Address the “why” and how does it help your organisation be more successful
      • Talk about cybersecurity in the news, how it was a result of human error, and how this program will help to mitigate human error
    How to measure the benefits of a successful security awareness program:
      • Track metrics like the phish-prone percentage of your organisation or number of phishing emails reported over time
      • Conduct surveys with different stakeholders to gauge their perception of the program’s success
      • Whatever you use to measure success, make sure it is defined, agreed upon and tracked
    How to develop a stronger security awareness culture over time:
      • Evaluate your organisation against the 7 dimensions of security culture, and measure it against your industry’s benchmarks (we have done studies on this!)
      • Tie your security culture into your overall organisational culture so the two are not at odds
      • Understand that there is no fast track to a good security culture - by consistently following the advice above, you will develop a strong security awareness culture over time
    We hope these tips can help you implement new-school security awareness training for your users. Here are more in-depth videos on our partner support site. Make sure you're prepared for Cybersecurity Awareness Month and beyond!                    

    Get Your Free 2021 Cybersecurity Awareness Month Resource Kit

    In today's hybrid work environment, your users are more susceptible than ever to attacks like phishing and social engineering. Cybercriminals know this and are constantly changing tactics to exploit new vulnerabilities. We've put together these resources so you can keep your users on their toes with security top of mind. Request your kit now to help your users defend against cybercrime whether they are fully remote, back in the office, or a combination of both.
    Here's what you'll get:
    • Access to free resources for you including our most popular on-demand webinar and whitepaper
    • Resources to help you plan your activities, including your Cybersecurity Awareness Month Guide and Cybersecurity Awareness Weekly Planner
    • Two free training modules for your users; "Your Role: Internet Security and You" and "2021 Social Engineering Red Flags," both available in multiple languages
    • Resources to share with your users including Kevin Mitnick cybersecurity demo videos, infographics, tip sheets, awareness posters, and wallpapers
    • All assets are printable and available digitally, so they can be delivered to your users no matter where they are working from 
    Get Your Free Resource Kit Now!
    ]]>    Fri, 01 Oct 2021 15:18:27 +0000    <![CDATA[Probability of Experiencing a Vendor Email Compromise Attack Increases 96%]]>https://www.actisofttechnology.com/blogs/post/probability-of-experiencing-a-vendor-email-compromise-attack-increases-96Blog courtesy of KnowBe4 Written by Stu Sjouwerman Vendor Email Compromise requires first taking control of a strategic email account within the victim ]]>
    Blog courtesy of KnowBe4
    Written by Stu Sjouwerman
    Vendor Email Compromise requires first taking control of a strategic email account within the victim organisations. According to new data, cybercriminals are getting really good at this.

    Vendor Email Compromise – an attack where an email account is actually taken over rather than simply spoofed as seen in business email compromise attacks – can have a far greater impact on the organisation. Emails coming from a threat actor-controlled legitimate email account are much harder – if not impossible – to discern as being malicious in nature.
    According to new data in Abnormal Security’s Q3 2021 Email Threat Report, email account takeovers are rising in both number and success rates:
      • The chance of experiencing a VEC attack has risen 96% over the last 12 months
      • Mid-sized companies are 43% likely to have at least one account takeover per quarter
      • Enterprises with 50K+ employees are 60% likely to be a victim of account takeover
      • The C-Suite is the most targeted group, at three times than VPs – the next targeted group
      • 14% of account takeovers occur at department head levels within organizations
      • The average request in a VEC attack is $183,000, with the highest documented being $1.6 million

    With the potential for VEC attacks to cost organisation’s millions annually, it’s first imperative to protect email accounts from the possibility of account takeover using multi-factor authentication and zero trust solutions that scrutinise requests to access email. It’s equally important to educate users involved with the organisation’s finances using Security Awareness Training to maintain a sense of vigilance – even when a request comes from a legitimate source. It’s necessary to validate any unexpected requests using a separate communication medium to ensure the person believed to be asking is actually doing so.

    Request A Demo: KCM GRC

    The new KCM GRC platform helps you get your audits done in half the time, is easy to use, and is surprisingly affordable. No more: "UGH, is it that time again!" 
    With KCM GRC you can:
      • Reduce the amount of time and money required to easily manage your compliance, risk and audit requirements
      • Automate reminders so you can quickly see what tasks have been completed, not met, and are past due
      • Simplify risk management with an intuitive interface simple workflow based on NIST 800-30.
      • Efficiently manage your third-party vendor risk requirements
      • Quickly implement compliance and risk assessment processes using KnowBe4's pre-built requirements and assessment templates
    Request Your Demo!
    ]]>    Mon, 20 Sep 2021 14:51:00 +0000    <![CDATA[Enterprise Organisations Have as Much as an 85% Chance of Receiving a BEC Attack Every Week]]>https://www.actisofttechnology.com/blogs/post/enterprise-organizations-have-as-much-as-an-85-chance-of-receiving-a-bec-attack-every-weekBlog courtesy of KnowBe4 Written by Stu Sjouwerman Business Email Compromise is a multi-billion dollar business, representing 43% of all cybercrime last ]]>
    Blog courtesy of KnowBe4

    Written by Stu Sjouwerman

    Business Email Compromise is a multi-billion dollar business, representing 43% of all cybercrime last year. Despite it being dwarfed in the news by ransomware, it represents a growing and consistent threat.

    We’ve seen recent rises in BEC activity – along with a number of other cyberattacks – in both frequency and cost. But BEC tends to get lost in the shuffle; particularly when ransomware news has ransoms in the millions of dollars and seems to happen every day. But BEC is just as impactful a cyberattack and, from the latest data, seems to be happening quite frequently.

    Keep in mind that most BEC attacks are limited in scope to the one and only CFO in your organisation or a small group of individuals in the finance department. The good news is as the organisation grows, the number of BEC attacks won’t necessarily increase. The bad news is that threat actors only need to focus on a few people to be successful.
    In addition to enterprises having a high probability of attack, according to Abnormal Security’s Q3 2021 Email Threat Report, businesses of every size are at risk:

      • Small organisations under 500 employees have a 42% probability of receiving a BEC attack each week
      • Mid-sized organisations, a 60-70% chance

    Part of this growth is the expansion in operational methods used by cybercriminal groups seen on the dark web. Posts on cybercrime forums have been spotted that attempt to recruit or outsource functions related to BEC scams – particularly those looking for native-English speakers to help improve the credibility and efficacy of social engineering elements in BEC attacks.

    Because BEC relies pretty heavily on social engineering and spoofing companies, domains, and/or an individual, putting employees through Security Awareness Training is an effective way to minimise the threat surface of phishing attacks and stop BEC attacks before they have an opportunity to make an organisation a victim.

    Can hackers spoof an email address of your own domain?

    Are you aware that one of the first things hackers try is to see if they can spoof the email address of your CEO? If they are able to commit "CEO Fraud", penetrating your network is like taking candy from a baby.

    Now they can launch a "CEO fraud" spear phishing attack on your organisation, and that type of attack is very hard to defend against, unless your users are highly ‘security awareness’ trained.

    Find out now if your domain can be spoofed. The Domain Spoof Test (DST) is a one-time free service. Run this test so you can address any mail server configuration issues that are found.
    Try To Spoof Me!
    ]]>    Mon, 20 Sep 2021 08:31:00 +0000    <![CDATA[U.K. Organisations See Double the Number of Ransomware Attacks in the First Half of 2021]]>https://www.actisofttechnology.com/blogs/post/u.k.-organisations-see-double-the-number-of-ransomware-attacks-in-the-first-half-of-2021Blog courtesy of KnowBe4 Written by Stu Sjouwerman New analysis of ransomware incidents reported to the UK's Information Commissioner's Office (ICO) in ]]>
    Blog courtesy of KnowBe4

    Written by Stu Sjouwerman

    New analysis of ransomware incidents reported to the UK's Information Commissioner's Office (ICO) in the first half of 2021 show a massive rise when compared to 2020.

    Utilising incident data reported to the ICO, British cyber security organisation CybSafe has determined that 22% of all cyber incidents in the first six months of 2021 were attributed to ransomware attacks. This is double the 11% found in the first half of 2020.

    This doubling of the number of reported attacks is troubling, but not surprising, as 35% of all U.K. businesses experience ransomware attacks (with the global average being 37%), according to Sophos’ State of Ransomware 2021 report. 
    Additionally, 63% of U.K. businesses affected by ransomware reported their organisations' brand was negatively impacted, according to CyberReason’s Ransomware: The True Cost To Business report, making ransomware a legitimate threat to business longevity in the U.K.

    CybSafe’s analysis found that phishing was the primary cause of all cyber breaches reported to the ICO in the first half of this year, making up 40% of all successful attacks. Phishing continues to be a thorn in cybersecurity’s side, with some percentage of attacks finding their way past security solutions and into the Inbox where an unsuspecting user is fooled into clicking on malicious links and attachments.

    It’s only through continual Security Awareness Training that users will elevate their state of vigilance, always being on the lookout for malicious content and reducing whatever threat surface remains by the time an attack reaches the Inbox.

    Free Ransomware Simulator Tool

    Threat actors are constantly coming out with new strains to evade detection. Is your network effective in blocking all of them when employees fall for social engineering attacks?


    KnowBe4’s "RanSim" gives you a quick look at the effectiveness of your existing network protection. RanSim will simulate 22 ransomware infection scenarios and 1 cryptomining infection scenario and show you if a workstation is vulnerable.
    Here's how it works:


      • 100% harmless simulation of real ransomware and cryptomining infections
      • Does not use any of your own files
      • Tests 21 types of infection scenarios
      • Just download the install and run it 
      • Results in a few minutes!
    Get RanSim!
    ]]>    Tue, 31 Aug 2021 07:28:00 +0000    <![CDATA[Can the Microsoft 365 Platform Be Trusted to Stop Security Breaches?]]>https://www.actisofttechnology.com/blogs/post/defending-against-ransomware-attacks-should-start-and-can-end-with-security-awareness-training1Blog courtesy of KnowBe4 Written by Stu Sjouwerman Lax security policies, a lack of security measures and solutions in place, and an expectation that Mi ]]>
    Blog courtesy of KnowBe4
    Written by Stu Sjouwerman
    Lax security policies, a lack of security measures and solutions in place, and an expectation that Microsoft will address any security issues is putting organisations at risk.

    Microsoft has gone to great lengths to ensure their Microsoft 365 platform offers modern security measures to keep their customers' data safe. But according to new data from cloud email security provider Hornet Security, 25% of organisations have reported a known email-based security breach, and it begs the question “why?”
    According to Hornet Security, a lot of the issue resides with organisations not taking advantage of security features – whether from Microsoft or a third-party:
      • 33% of organisations are not using Microsoft’s multi-factor authentication (MFA)
      • Of those using MFA, 55% of organisations are not using Conditional Access which scrutinizes connection requests beyond just providing credentials and additional authentication factors
      • Only 43% leverage Microsoft’s data loss prevention policies to keep data from leaving the organisation
      • 68% of organisations expect Microsoft to keep email safe from threats

    What’s interesting is that almost none of these features (with the exception of MFA) address the core issue – phishing and compromised credentials. For every organisation that has experienced a security breach, there’s a phishing email riddled with social engineering tactics and, more importantly, a recipient user who engages and activates attacker’s malicious content.

    It’s imperative that organisations recognise the need to follow the attack kill chain and see one of the weakest links is the user who unwittingly enables threat actors by falling for phishing scams. Users that undergo continual Security Awareness Training are better equipped on a daily basis to see phishing attacks for what they really are and keep the organization safe by not playing their role in an email-based attack.

    Request A Demo: Security Awareness Training

    New-school Security Awareness Training is critical to enabling you and your IT staff to connect with users and help them make the right security decisions all of the time. This isn't a one and done deal, continuous training and simulated phishing are both needed to mobilise users as your last line of defence. Request your one-on-one demo of KnowBe4's security awareness training and simulated phishing platform and see how easy it can be!

    Save My Spot!
    ]]>    Fri, 20 Aug 2021 13:45:50 +0000    <![CDATA[Defending Against Ransomware Attacks Should Start (and Can End) With Security Awareness Training]]>https://www.actisofttechnology.com/blogs/post/defending-against-ransomware-attacks-should-start-and-can-end-with-security-awareness-trainingBlog courtesy of KnowBe4 Written by Stu Sjouwerman The world’s most dangerous, expensive, and impactful cyb ]]>
    Blog courtesy of KnowBe4

    Written by Stu Sjouwerman

    The world’s most dangerous, expensive, and impactful cyberattack can potentially be stopped with little more than a conscientious user who is paying attention.

    It feels like every year I need to be saying “this year is the year of ransomware”. Every year the attacks become more frequent, the number of players increase, the ransom demands get larger, and the payouts reach new unprecedented levels.               


    Most cybersecurity strategies focus on layering in security solutions that prevent, detect, and respond to any kind of malware-based attacks – which includes ransomware. One aspect of the attack chain that can have a material impact on the effectiveness of your ransomware defence is the very prevalent human element. In most cases, phishing attacks are the primary initial attack vector, causing your users to stand squarely in between the ransomware attack and your organisation.

    No single security solution can stop every attack, so it makes sense that because ransomware gangs – in part – require users to interact with malicious email content to enable an attack, educating those users via Security Awareness Training to spot an attack to stop it from ever continuing.

    So, your ransomware defence strategy should start with Security Awareness Training because you have no guarantee that the next attack will be stopped by solutions. But a user can make the difference between a boring normal workday and one where your entire operations has come to a screeching halt.                

    Free Ransomware Simulator Tool

    Threat actors are constantly coming out with new strains to evade detection. Is your network effective in blocking all of them when employees fall for social engineering attacks?


    KnowBe4’s "RanSim" gives you a quick look at the effectiveness of your existing network protection. RanSim will simulate 22 ransomware infection scenarios and 1 cryptomining infection scenario and show you if a workstation is vulnerable.
    Here's how it works:


      • 100% harmless simulation of real ransomware and cryptomining infections
      • Does not use any of your own files
      • Tests 21 types of infection scenarios
      • Just download the install and run it 
      • Results in a few minutes!
    Get RanSim!
    ]]>    Fri, 20 Aug 2021 13:45:50 +0000    <![CDATA[Ransomware Attacks This Year Are Already Higher Than 2020]]>https://www.actisofttechnology.com/blogs/post/ransomware-attacks-this-year-are-already-higher-than-2020Blog courtesy of KnowBe4 Written by Stu Sjouwerman According to the 2021 Cyber Threat Report by SonicWall, 304.7 million ransomware attacks occurred in ]]>
    Blog courtesy of KnowBe4

    Written by Stu Sjouwerman

    According to the 2021 Cyber Threat Report by SonicWall, 304.7 million ransomware attacks occurred in the first half of 2021, already surpassing the total number of ransomware attacks for all of 2020 with 304.6 million (a 151% increase YTD).

    The increase in ransomware attacks are due to the shift to remote work, allowing threat actors to take advantage. 

    In a statement by SonicWall CEO, Bill Conner, commented “In a year driven by anxiety and uncertainty, cybercriminals have continued to accelerate attacks against innocent people and vulnerable institutions. This latest data shows that sophisticated threat actors are tirelessly adapting their tactics and embracing ransomware to reap financial gain and sow discord."
    The spikes in volume of ransomware have occurred in the US at a rate of 185% and 144% in the UK. The top industries being targeted are government (917%), education (615%), healthcare (594%), and retail (264%) companies. June 2021 was the worst month with SonicWall reporting 78.4 million registered ransomware attacks. 

    These alarming stats should be a warning for your organisation. One malicious email could cost your organisation millions. It's important to utilise additional security layers to prevent an attack from ever occurring. The most recommended method is implementing new-school security awareness training to ensure your employees know how to spot and report any suspicious activity. 

    TechRadar Pro has the full story. 

    Free Ransomware Simulator Tool

    Threat actors are constantly coming out with new strains to evade detection. Is your network effective in blocking all of them when employees fall for social engineering attacks?


    KnowBe4’s "RanSim" gives you a quick look at the effectiveness of your existing network protection. RanSim will simulate 22 ransomware infection scenarios and 1 cryptomining infection scenario and show you if a workstation is vulnerable.
    Here's how it works:


      • 100% harmless simulation of real ransomware and cryptomining infections
      • Does not use any of your own files
      • Tests 21 types of infection scenarios
      • Just download the install and run it 
      • Results in a few minutes!
    Get RanSim!
    ]]>    Wed, 04 Aug 2021 07:39:00 +0000