Story image

Small businesses repeatedly falling victim to ransomware - Kaspersky

16 Oct 18

Small businesses with less than 50 employees can be a lucrative proposition for cybercriminals because of the data they hold on behalf of their clients and employees.

This can fetch a high price if sold or ransomed and can open up new revenue streams for enterprising criminals.

Besides the constant risk of cybersecurity disruption, a study from Kaspersky Lab has revealed that small businesses are also at risk because of their reliance on staff who are inexperienced at cybersecurity.

One-in-three firms this size entrust IT security to employees, who might not have the know-how necessary to protect businesses from prolific threats. 

The Kaspersky Lab report sheds light on how ransomware is impacting them — with findings showing that when these firms fall prey to ransomware, they tend to be victimised again and again.

Indeed, out of those small businesses that have suffered an incident in the past 12 months, many have fallen victim to multiple incidents – with 37% having experienced two or three infections.

This can have a crippling effect on a business because suffering downtime or a lack of access to files for prolonged periods can be extremely damaging.

Out of the ransomware victims surveyed, over a quarter (27%) have lost access to their data for weeks, meaning this issue is constantly putting small firms at risk of inactivity, and therefore loss of income and reputational damage.

Small businesses that are not cybersecurity-savvy are also more likely to pay the ransom requested as soon as possible to try to minimise downtime without knowing if the attacker legitimately has the ability or the intention to restore their business-critical data.

Kaspersky Lab B2B product marketing head Sergey Martsynkyan says, “Ransomware is one of the serious cyber threats faced by businesses today.

“When it strikes, it can have huge ramifications, no matter what size the business is. However, very small firms are particularly vulnerable to multiple incidents.

“One of the reasons for this may be that at many small businesses, the IT provision is managed by people that perhaps don’t know how to best avert the dangers – they simply don’t have the time or IT skills to cope with the threats”.

There are solutions in the market that can help businesses to protect themselves from the risk of ransomware and more.

How to configure your firewall for maximum effectiveness
ManageEngine offers some firewall best practices that can help security admins handle the conundrum of speed vs security.
Exclusive: Why botnets will swarm IoT devices
“What if these nodes were able to make autonomous decisions with minimal supervision, use their collective intelligence to solve problems?”
Why you should leverage a next-gen firewall platform
Through full lifecycle-based threat detection and prevention, organisations are able to manage the entire threat lifecycle without adding additional solutions.
The quid pro quo in the IoT age
Consumer consciousness around data privacy, security and stewardship has increased tenfold in recent years, forcing businesses to make customer privacy a business imperative.
ForeScout acquires OT security company SecurityMatters for US$113mil
Recent cyberattacks, such as WannaCry, NotPetya and Triton, demonstrated how vulnerable OT networks can result in significant business disruption and financial loss.
Exclusive: Fileless malware driving uptake of behavioural analytics
Fileless malware often finds its way into organisations via web browsers (or in combination with other vectors such as infected USB drives).
'DerpTrolling’ faces jail time for Sony DoS attacks
A United States federal court has charged a 23-year-old man for the hacks on Sony Online Entertainment and other major companies back in 2014.
It's time to rethink your back-up and recovery strategy
"It is becoming apparent that legacy approaches to backup and recovery may no longer be sufficient for most organisations."