Saturday, November 30, 2013

The Threat Landscape

We've all done it, clicking happily along like usual, engrossed, absently clicking the pop-up without paying much, if any, attention to what is wanted.  Usually it's no biggie, just another opportunity for distraction.  But not always.

There's an increasingly common result from those absent clicks, one that in extreme instances will lock up all your data, and in all will demand payment.  This is a new variety of infection referred to as "ransomware".  

Technically, it isn't a virus, think more like a bacteria.  Malware, computer programs written for a less than honorable purpose, is on the rise, especially the kind that directly invites you (read extorts) to send the writers money.  In the process, of course, also revealing enough information for them to take you to the cleaners.  

Chances are if you see something like this it has a name relating to computer security, suddenly popping up and announcing a host of infections that it will kindly address.  Then there are the types that will do this while locking you out of certain computer functions.  Others lock you out of nearly all computer functions, and then there are the ones that encrypt your data and hold it hostage.  Yes, your data is now locked with an encryption key that has not been shared with either you or the NSA.

Generally speaking these infections can be gotten rid of with a fairly straightforward approach without any collateral damage.  But in the last instance, collateral damage is the name of the game. They are out to get you by whatever sensitive part presents itself and hang on till you pay.  And in some form or fashion you will.  Maybe not them, maybe not anyone, but in loss of productivity and time, still a loss.  

So what to do?  First off, read the popups.  If you just went to a website and there was a permission request, deny it.  Go back to what you were doing and see if it works.  Maybe it was a fluke, maybe it wasn't.  Infections can come from any website out there if they aren't being watched for hacks so be aware of what a site is requesting.  If you came there to read but that isn't done without granting permission, go somewhere else.  If you are looking for a download, get it from a reliable source and reduce your risk.  If you have Java, check it and make sure it's up-to-date.

Second, make sure your data is being backed up regularly, and to an external or offsite location. Make multiple copies, and anything that is mission critical needs special consideration.  Maybe save it to a cloud service such as Box, Dropbox, or Google Drive as well as to your computer.  If you would be willing to pay the scammers a minimum of $300 to get it back, it needs a backup plan and needs it now.

Third, keep your security up to date.  NOTHING will protect against anything, and if you click the wrong permission it becomes rather pointless anyway as the first thing the attack will focus on will be any and all defences already in place, but between a decent set of security software and some good old fashioned Spidey sense, you can avoid the biggest pitfalls.  If those fail, you have your backups. If you didn't make those, well, you won't have much.