Below are some ways to protect yourself and your organisation. Some of these recommendations can be implemented immediately to reduce any upcoming attack along with a more long term future proof solution(s). One being Sophos Intercept X - if you already have Intercept X you are protected.
Server Access and Systems
Advise users to be vigilant and do not open any suspicious email or attachments – if in doubt call the help desk
Ensure your users are saving their data to areas where it will be backed up – away from laptops where the single point of failure is the disk
Patch early and patch often to reduce the risk.
Execution – disable any non-used apps, for example PowerShell, macros, wscript, js, hta
Anti-Ransomware solution from Sophos – Called Intercept X
Sophos Intercept X is a fully functioning Anti-Ransomware solution
Globelink are happy to spin up a 30 day trial for up to 100 users to help.
If you are running Intercept X none of the weekend’s events would have affected you – for more information please do contact Globelink.
Sophos SandStorm on the perimeter
Globelink is a Sophos Synchronised Security Partner, only one of a few within the UK. We will be working with and assisting all of our customers to identify any vulnerabilities present within your infrastructure.