Many retailers are struggling to deal with ransomware attacks
It’s getting harder to stop the encryption
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
Slowly but surely, retailers are losing the battle againstransomwareoperators, a worrying new report has claimed.
After surveying 3,000 IT and cybersecurity leaders in SMBs and enterprises around the world (including 355 from the retail industry), Sophos found that only 26% of retailers were able to disrupt a ransomware attack before having their data encrypted. Last year, it was 28%, and the year before that - 34%.
The survey should be a wake-up call for organizations in the retail sector, argues Chester Wisniewski, director, global field CTO, Sophos, saying that retailers need to tighten up on security, now.
Reader Offer: $50 Amazon gift card with demoPerimeter 81’s Malware Protection intercepts threats at the delivery stage to prevent known malware, polymorphic attacks, zero-day exploits, and more. Let your people use the web freely without risking data and network security.
Preferred partner (What does this mean?)
Longer recovery
Not every victim pays the ransom demand. But among those that do, their median recovery cost (excluding the ransom payment) was four times the recovery cost of those that had a working backup ($3 million and $750,000 respectively).
Sophos’ report showed more than two in five (43%) paying the ransom demand. “There are no shortcuts in these situations and rebuilding systems is almost always required. It’s better to deprive the criminals of their spoils and build back better,” said Wisniewski.
The good news for retailers (but not for everyone else) is that the percentage of retail firms being targeted by ransomware threat actors dropped from 77% last year, to 69% this year. However, the percentage of firms that recovered in less than a day dropped from 15% to 9%. At the same time, the percentage of those who took more than a month to do the same rose from 17% to 21%.
Ransomware usually starts with a reckless employee downloading malware, or granting the attackers access to their endpoints in some way. Hence, the best protection against ransomware starts with the education of the employees, on the dangers of cyberattacks.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
Backing up key systems and data, and installing endpoint protection services also helps.
More from TechRadar Pro
Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.
This new phishing strategy utilizes GitHub comments to distribute malware
Should your VPN always be on?
NYT Strands today — hints, answers and spangram for Sunday, November 10 (game #252)
