Be Prepared

CF: What should organizations be doing to protect themselves from REvil and other ransomware groups?

MG: Proactively monitoring the cyber threat landscape can go a long way towards preventing and protecting against a ransomware attack. Flashpoint recommends the following actions:

• Monitor illicit communities for the newest targeting techniques, breached data for sale, and technologies that are being targeted.
• Implement multifactor authentication (MFA), password change and password complexity.
• Monitor bot shops for employee access to corporate domains.
• Monitor trending vulnerabilities and exploits being discussed in illicit communities to prioritize your patch-management process.
• Review the CISA Stop Ransomware site for additional tips.