Kearney (308) 234-9335 | Hastings (402) 463-3456 | GI (308) 384-6939 | Lincoln (402) 483-6400
Facebook
Twitter
LinkedIn
YouTube
Instagram
RSS
  • About Us
    • Return Policy
    • Financing
    • Employment
    • Contact Us
  • Repairs
    • iPhone Repair
    • Mac Repair
    • iPad & iPod Repair
    • Lenovo Repair
    • Apple Watch Repair
    • Beats & More Repair
    • AppleCare
    • General Repair Request
  • Services
    • Care+ Unlimited Tech Support
    • One-on-One Tech Training
    • Data Recovery Services
    • Electronic Recycling
    • Trade-In Program
    • Remote Tech Support
  • Products
    • Apple Online Store
    • Apple
    • Lenovo
    • Sonos
    • Original HP Ink and Toner
    • Closeouts
    • Pre-owned Inventory
  • Education
    • Education Website
    • Higher Ground Catalog
    • Projector Case Study
    • Brighter Futures Pricing | K-12
    • Brighter Futures | K – 12 Education Catalog
    • Epson Projector Demo Program
    • ESU 7 Repair Request
    • Submit a Device Repair Request
  • Resources
    • Blog
    • How to Turn Off ‘Find My Device’
  • Locations
    • Grand Island
    • Hastings
    • Kearney
    • Lincoln

Ransomware Is on the Rise: Learn How to Protect Your Macs

August 25, 2021Apple, MacKelsey Jezbera

In cybercriminal circles, ransomware is all the rage. Once it has infected a computer, it encrypts all the files and then presents a ransom demand—pay up to get the decryption software necessary to recover the data.

Ransomware has been in the news all year, with the Colonial Pipeline attack in particular spending weeks in the headlines. Attacks rose 485% in 2020 and show no signs of abating. The amounts demanded by the attackers are increasing, too, with PC manufacturer Acer and Apple supplier Quanta both hit with $50 million demands. Worse, some ransomware attackers are adding an extortion component where they threaten to reveal confidential data if the victim doesn’t pay. It’s scary, we know.

First, the good news. Although there are several examples of ransomware that target the Mac, none of them have been particularly well done or (as far as we know) successful. Right now, the chances of Macs falling prey to ransomware are very low, and there’s no reason to panic.

However, complacency is dangerous. There’s a trend toward “ransomware as a service” (RaaS). The RaaS operators maintain the ransomware malware, offer a payment portal for victims, and provide “customer service” for victims who don’t know how to pay with Bitcoin or other cryptocurrencies. Affiliates spread the ransomware and split the revenues with the operators. It’s a tidy little cybercriminal enterprise, and separating the malware development and network penetration tasks has made it significantly easier for more criminals to leverage ransomware. It’s only a matter of time before they turn their attention to Macs.

For the most part, protecting your Macs from ransomware is no different than protecting against any number of other security problems. Follow this core advice:

  • Keep Macs and apps up to date: Always install macOS and security updates, and keep other apps up to date. With every update, Apple addresses numerous security vulnerabilities, fixing the vast majority of them before attackers can exploit them with malware. Every so often, however, Apple’s security notes include this sentence: “Apple is aware of a report that this issue may have been actively exploited.” That means there may be malware that targets that vulnerability; install such updates immediately!
  • Use strong passwords with a password manager: You’ve heard it from us before, and you’ll hear it again, but it’s essential that everyone in your organization use strong, unique passwords through a password manager like 1Password, LastPass, or even Apple’s iCloud Keychain. Just one weak password could allow attackers to infiate a computer or server and install ransomware.
  • Be suspicious of links and attachments: Ensure that everyone in your organization is careful about opening attachments or clicking links in email messages from unknown people or that seem off in some way. Phishing attacks are one of the primary ways of distributing malware. (If your group needs training in phishing awareness, contact us.)
  • Never download pirated software! Even aside from the fact that it’s ethically problematic, the most recent piece of Mac ransomware—ThiefQuest—was initially found in a malicious installer purporting to be for the LittleSnitch network security utility (ironic, eh?). Get apps only from the developers’ official sites or the Mac App Store.
  • Make frequent backups: Backups are essential so, even if you do fall prey to ransomware, you can restore data from before the infection point. The caveat is that some of your backups must be isolated from the Macs in question—some ransomware intentionally tries to encrypt or delete connected backups.
  • Monitor for ransomware: Although ransomware usually tries to stay below the radar while it’s encrypting files, the free RansomWhere utility can identify processes that quickly create encrypted files. It will likely incorrectly flag some legitimate behavior too (like in the screenshot below), but it’s still a helpful tool.
  • Have anti-malware software: For the most part, if you’re careful about following the advice above, you’ll be fine. But it’s a good idea to have a current anti-malware app around and run it occasionally—if you don’t already have one, try the free version of Malwarebytes. If you—or your users—aren’t good about the basic precautions, you might want to run anti-malware software all the time or set up broader network protections.
  • Have a disaster management plan: Every business should think about how it would react to a fire, flood, earthquake, or other disaster. When building a disaster management plan, be sure to include ransomware. How would you shut down infected systems, rebuild them from scratch, and restore uninfected files?

Setting up a backup strategy that protects against ransomware requires a little more thought. As noted, ransomware often tries to render backups useless in one way or another. You need to have versioned backups that allow you to restore from before the ransomware infection, and those backups need to be isolated from the computers and network being backed up. Techniques that help include:

  • Isolate backup drives: Rotate multiple Time Machine drives, with at least one that’s always disconnected. However, this strategy assumes you’ll detect a ransomware infection before you’ve rotated all the drives. Ransomware could lie undetected for weeks or months before activating. Manually run current anti-malware software before connecting any backup drive.
  • Use Internet backup: Set up an Internet backup system that will maintain versions of backed-up files, such as Backblaze with its Extended Version History feature. Retrospect 18 also supports object locking on cloud storage systems, which provides immutable storage. It ensures that no one—even someone who acquires root credentials—can delete the backups during the retention period.
  • Consider tape backups: Long ago, tape backups were the go-to solution for network backups, but as the price-per-gigabyte of hard drives dropped precipitously and Internet backups became feasible, tape has largely fallen by the wayside. But tape backups are still an option. They can hold a lot of data and are easily kept offline in a separate location. Plus, some tape drives can even operate in a write-once, read-many (WORM) mode that guarantees data can’t be erased or overwritten. Tape requires more human interaction than other backup methods, but it’s still a cost-effective way to protect hundreds of terabytes of data against ransomware.

Again, there’s no reason to panic about ransomware, but if it could significantly damage your business, you should take steps to reduce the chance of getting hit and ensure that you could restore your data if your computers were to get infected. There is no single approach that’s ideal for everyone, but we can help you think about what’s involved and develop a strategy that balances protection, cost, and effort.

(Featured image by iStock.com/chainatp)

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Recent Posts

  • FAQs about Apple’s Messages App and What Can Go Wrong When Using It
  • Protect Your iPhone Passcode by Using Face ID or Touch ID
  • A Practical Guide to Identifying Phishing Emails
  • Is Your Wi-Fi Network a Security Risk?
  • What’s the Difference between Removing and Deleting an App?

Categories

Archives

Facebook
Twitter
LinkedIn
YouTube
Instagram
RSS

Kearney

2315 2nd Ave
Kearney, NE 68847

308-234-9335

308-234-9335

Hastings

1001 W 2nd St
Hastings, NE 68901

402-463-3456

402-463-3456

Grand Island

2720 Old Fair Rd
Grand Island, NE 68803

308-384-6939

308-384-6939

Lincoln

235 S 70th St Ste 101
Lincoln, NE 68510

402-483-6400

402-483-6400

Questions? Contact Us Now!

Contact Us

Home

About Us

  • Return Policy
  • Financing
  • Employment
  • Contact Us

Repairs

  • iPhone Repair
  • Mac Repair
  • iPad & iPod Repair
  • Lenovo Repair
  • Apple Watch Repair
  • Beats & More Repair
  • AppleCare
  • General Repair Request

Services

  • Care+ Unlimited Tech Support
  • One-on-One Tech Training
  • Data Recovery Services
  • Electronic Recycling
  • Trade-In Program
  • Remote Tech Support

Products

  • Apple Online Store
  • Apple
  • Lenovo
  • Sonos
  • Original HP Ink and Toner
  • Closeouts
  • Pre-owned Inventory

Resources

  • Blog
  • How to Turn Off ‘Find My Device’
  • Education Resources

Copyright © 2022 Computer Hardware.

Powered by web design kearney, ne