Protect yourself from GandCrab

GandCrab detections are in sharp decline but we still have Sodinokibi and other strains of ransomware to contend with.

  • Back up your files. With regular data backups, a ransomware infection becomes a small, if annoying, inconvenience. Simply wipe and restore your system and move on with your life
  • Be wary of emails attachments and links. If you receive an email from a friend, family member, or coworker and it just sounds weird—think twice. If the email is from a company you do business with, try navigating to the company website or, if available, use the app.
  • Patch and update regularly. Keeping your system up-to-date will stop attackers from taking advantage of exploits that can be used to gain unauthorized access to your computer. Exploits, as you may recall, are the main method by which GandCrab infects target systems. Similarly, if you have old, outdated software on your computer you aren’t using anymore—delete it.
  • Limit remote access. The best way to protect against a Remote Desktop Protocol (RDP) attack is to limit remote access. Ask yourself, does this system really need to be accessed remotely? If the answer is yes, at least limit access to the users who really need it. Better yet, implement a virtual private network (VPN) for all remote users, doing so negates any possibility of an RDP attack.
  • Use strong passwords and don’t reuse passwords across sites. In the event that a system absolutely needs to be accessed remotely, be sure to use a strong password with multi-factor authentication. Granted, remembering unique passwords for all of the various sites and applications you use is a difficult if not impossible task. Fortunately, a password manager can do that for you.