Advice to businesses following May 12 cyber-attack
Following the ransomware cyber attack on Friday 12 May which affected the NHS and is believed to have affected other organisations globally, the City of London Police’s National Fraud Intelligence Bureau has issued an alert urging both individuals and businesses to follow protection advice immediately and in the coming days.
Key Advice for Individuals To Protect Yourself From Ransomware:
– Install system and application updates on all devices as soon as they become available.
– Install anti-virus software on all devices and keep it updated.
– Create regular backups of your important files to a device (such as an external hard drive or memory stick) that isn’t left connected to your computer as any malware infection could spread to that too.
– Only install apps from official app stores, such as Google’s Play Store, or Apple’s App Store, as they offer better levels of protection than some third=party stores. Jailbreaking, rooting, or disabling any of the default security features of your device will make it more susceptible to malware infections.
Key Messages for Businesses To Protect Themselves From Ransomware:
– Install system and application updates on all devices as soon as they become available.
– Install anti-virus software on all devices and keep it updated.
– Create regular backups of your important files to a device that isn’t left connected to your network as any malware infection could spread to that too.
The National Cyber Security Centre’s technical guidance includes specific software patches to use that will prevent uninfected computers on your network from becoming infected with the “WannaCry” Ransomware: https://www.ncsc.gov.uk/guidance/ransomware-latest-ncsc-guidance
For additional in-depth technical guidance on how to protect your organisation from ransomware, details can be found here: https://www.ncsc.gov.uk/guidance/protecting-your-organisation-ransomware
Phishing/Smishing
Fraudsters may exploit this high-profile incident and use it as part of phishing/smishing campaigns. We urge people to be cautious if they receive any unsolicited communications from the NHS.
The advice for that is the following:
- An email address can be spoofed. Don’t open attachments or click on the links within any unsolicited emails you receive, and never respond to emails that ask for your personal or financial details.
- The sender’s name and number in a text message can be spoofed, so even if the message appears to be from an organisation you know of, you should still exercise caution, particularly if the texts are asking you to click on a link or call a number.
Don’t disclose your personal or financial details during a cold call, and remember that the police and banks will never ring you and ask you to verify your PIN, withdraw your cash, or transfer your money to another “safe” account.
If you have been a victim of fraud or cyber crime, please report it to Action Fraud at http://www.actionfraud.police.uk/
For more information, please visit www.safeinwarwickshire.com/cybercrime
Meanwhile, locally, businesses in Warwickshire have access to constant updates and guidance on cyber-safety from the The Warwickshire Business Watch website which houses a variety of information to empower businesses to prevent traditional and cyber crime.
The Community Messaging Service continues to grow in popularity and regularly sends out alerts to businesses across the county. The ‘Keep Me Posted’ system also continues to grow rapidly, distributing to subscribers all information that is added to the Business Watch website. Information added to the website is sent directly into the subscriber’s inbox and includes incidents, events and important news on a range of topics from the local area.
To sign up to the Keep Me Posted Business Watch alerts visit the link below.
https://public.govdelivery.com/accounts/UKWARWICKSHIRE/subscriber/new?topic_id=UKWARWICKSHIRE_22
To access the Warwickshire Business Watch website and sign up to either of the Alerts visit: www.warwickshirebusinesswatch.co.uk or use the Twitter address @WarksBusiness.