Facebook Twitter LinkedIn RSS
    Trending
    • Unbeatable Discounts on L’Oréal’s Dermatological Beauty Brands
    • First Asset Management launches N100 billion infrastructure fund
    • From Lagos to Nairobi: How One African Crypto Community Transformed a Bitcoin Milestone into a Continental Movement
    • NITDA: 56% of IT projects fail due to tech obsession, poor planning
    • Sanwo-Olu, Sule, and Other Visionaries to Headline Lagos Future Conference 2025
    • Zoho Launches Ulaa Enterprise, a Secure and User-Friendly Browser for Modern Workplaces
    • Self-optimising AI: The New Frontier of Technological Innovation, By Louis Napoletani
    • Mart Networks Launches Invinsense-Powered Cybersecurity Solution Tailored for Fintechs
    Facebook Twitter LinkedIn
    ITPulse.com.ngITPulse.com.ng
    • News
    • Interviews
    • Blogs
    • Analysis
    • Opinion
    • Videos
    • Press Releases
    • Pictures
    • Advertise
    ITPulse.com.ngITPulse.com.ng
    Home»News»Nine ways companies can fight ransomware attacks
    News 3 Mins Read

    Nine ways companies can fight ransomware attacks

    mmBy ITPulseApril 19, 2022
    Facebook Twitter WhatsApp Pinterest LinkedIn Reddit Tumblr Email
    Yanluowang attack
    An example of a Yanluowang attack ransom note
    Share
    Facebook Twitter LinkedIn Pinterest Email

    In the face of unprecedented attacks occasioned by ransomware such Yanluowang, which targets companies around the world, encrypting files on their computers and blocking access to their systems, so that victims cannot access their data, Kaspersky researchers have recommended nine ways companies can fight ransomware attacks.

    The nine ways are:

    • Do not expose remote desktop services, (such as RDP), to public networks unless absolutely necessary and always use strong passwords for them.
    • Promptly install available patches for commercial VPN solutions that provide access for remote employees and act as gateways into your network.
    • Always keep software updated on all devices you use to prevent ransomware from exploiting vulnerabilities.
    • Focus your defense strategy on detecting lateral movements and data exfiltration to the Internet. Pay special attention to outgoing traffic to detect cybercriminals’ connections.
    • Back up data regularly and make sure you can access it quickly in an emergency.
    • Use the latest Threat Intelligence to stay on top of current TTPs used by threat actors.
    • Use solutions like Kaspersky Endpoint Detection and Response and Kaspersky Managed Detection and Response, which help identify and stop an attack during its early stages before attackers are able to achieve their final goals.
    • Protect the corporate environment by educating your employees. Dedicated training courses, such as the ones provided on the Kaspersky Automated Security Awareness Platform, can help.
    • Use a reliable endpoint security solution, such as Kaspersky Endpoint Security for Business, that is powered by exploit prevention, behaviour detection and a remediation engine capable of rolling back malicious actions. KESB also has self-defense mechanisms to prevent cybercriminals from removing it.

    Yanlouwang was first discovered in October 2021. Its name is a reference to the Chinese deity, Yanluo Wang, one of the ten kings of hell. According to Kaspersky telemetry, Yanlouwang has been attacking large businesses in the United States, Turkey, Brazil and other countries.

    An attack using Yanluowang begins with an operator manually launching encryption. While encrypting the victims’ files, this ransomware changes file extensions to “.Yanlouwang.” After attacking the computer, an open-access file is left with a ransom note. Cybercriminals threaten the victim that if they go to the police all files on the infected computer will be deleted. Even after the deletion of all files, they will still not be left alone: Yanluowang’s authors threaten to then attack the entire company with DDoS attacks and ransomware infections on the company’s employee computers.

    Kaspersky experts analyzed the ransomware and found a vulnerability that allows victims to decrypt files on an infected computer. The user needs to have one or more original files and download a specially designed decryption tool. The victim is then able to decrypt the affected files independently. 

    “While Yangluowang is not a widespread ransomware threat, it still hurts users and, in the fight against ransomware, every defeated malicious program counts. Ransomware is an international threat, and that is why it is important for the cyber community to cooperate in the fight against ransomware. We hope our contribution helps organisations attacked by Yanlouwang,” comments Yanis Zinchenko, a security researcher at Kaspersky.

    Ramsomware Yanluowang attack
    Share. Facebook Twitter Pinterest LinkedIn Tumblr Telegram Email
    mm
    ITPulse
    • Website
    • Facebook
    • Twitter
    • LinkedIn

    ITPulse is a wholly information technology communication (ICT) news website, with a special focus on the African continent. The website provides up-to-date biz-tech news, analysis and comprehensive and thorough insight into the continent's ICT terrain

    Related Posts

    Unbeatable Discounts on L’Oréal’s Dermatological Beauty Brands

    May 21, 2025

    First Asset Management launches N100 billion infrastructure fund

    May 21, 2025

    NITDA: 56% of IT projects fail due to tech obsession, poor planning

    May 20, 2025

    Leave A Reply Cancel Reply

    Subscribe to Updates

    Get the latest creative news from FooBar about art, design and business.

    Latest Posts

    Unbeatable Discounts on L’Oréal’s Dermatological Beauty Brands

    May 21, 2025

    First Asset Management launches N100 billion infrastructure fund

    May 21, 2025

    From Lagos to Nairobi: How One African Crypto Community Transformed a Bitcoin Milestone into a Continental Movement

    May 21, 2025
    About
    About

    Itpulse.com.ng is a wholly information technology communication (ICT) news website, with special focus on the African continent. The website provides up-to-date biz-tech news, analysis and a comprehensive and thorough insight info the continent's ICT terrain.

    Contact us: editorial@itpulse.com.ng

    Facebook Twitter LinkedIn RSS
    Latest Posts

    Unbeatable Discounts on L’Oréal’s Dermatological Beauty Brands

    May 21, 2025

    First Asset Management launches N100 billion infrastructure fund

    May 21, 2025

    From Lagos to Nairobi: How One African Crypto Community Transformed a Bitcoin Milestone into a Continental Movement

    May 21, 2025
    Popular Posts

    Beyond SIEM: Designing Adaptive Threat Response Systems Using Context-Aware Correlation Models

    September 22, 2023

    Writing Code for Future Strangers: Engineering for unknown teams, contexts, and missions

    March 5, 2023

    Sanwo-Olu, Sule, and Other Visionaries to Headline Lagos Future Conference 2025

    May 20, 2025
    © 2017 - 2025 Itpulse. Designed by Max Excellence.
    • Terms & Conditions
    • Privacy Policy
    • Advertise
    • Contact Us

    Type above and press Enter to search. Press Esc to cancel.