Cyber criminals are constantly changing their attack methods to gain access to organisations’ data. Ransomware variants like Sodinokibi are a product of hacker’s efforts to evade detection and turn a profit off stolen data.
Sodinokibi is an example of ransomware as a service and was first discovered in late 2019. By exploiting the CVE-2019-2725 vulnerability discovered on Oracle WebLogic application servers to encrypt the files of infected users, this ransomware became the most lucrative malware of the last quarter of 2019 and continues to make the headlines in 2020, targeting organisations and stealing their data.
Download the Sodinokibi Ransomware Report for more detail.
“Today’s threats require organisations to adopt a robust, multi-layered approach to security and risk,” says Jeremy Matthews, CEO of Panda Security. “Working with our clients, we are able to assess the extent of business risk – it is clear just how important it is to have complete visibility of risk areas before you can begin to address the situation,” explains Matthews.
Panda Adaptive Defense 360 will help you reinforce your prevention, detection and remediation capacity. AD360 combines endpoint protection and endpoint detection and response (EDR), with 100% process classification and threat hunting – through a single, lightweight agent. Panda's zero-trust model will protect you from unknown malware and previously undetected ransomware variants.
Reassess your cyber security stance during Cybersecurity Awareness Month with a free 30-day risk assessment – apply now!
Panda Security’s experts recommend these five key tips to protect your organisation against ransomware:
- Keep systems and applications up to date. Most attacks succeed because the organisation’s systems aren’t regularly updated, allowing attackers to exploit security vulnerabilities.
- Take care with RDP. According to FBI data, 70% to 80% of ransomware enters systems through RDP (remote desktop protocol). It is advisable to disable it unless it is strictly necessary.
- Zero-trust stance to combat phishing. Avoid phishing techniques by implementing a zero-trust policy – if the sender is unknown, do not open attachments or click links.
- Remote backups. Many types of malware, including Sodinokibi, destroy backup copies on systems or devices. It is imperative that organisations have backup copies saved remotely.
- Advanced cyber security and protection on all endpoints. Addressing today’s threats requires advanced security technology such as Panda Adaptive Defense 360, which monitors all running processes in real-time.
For more information and resources to protect your business, visit our Web site and find out how to prevent a ransomware attack from shutting down your business.
Share