Cyber & Ransomware & Malware & Cryptojacking & Headaches

Not a day goes by without a Cyber issue making the News and how yet another organisation has been challenged by some type of IT incident or breach.

The incidence of cyber-crime activity is growing and real, so we all need to be more vigilant regarding the risks of Ransomware and Data theft, particularly in Health, Financial and Manufacturing sectors, with recent high profile Australian examples of Medibank, OPTUS and Latitude.

Security is serious, so we all need a Cyber plan in place to focus on both prevention and what ifs, and keeping a close eye on our IT environments.

It is well documented that Email, Internet and Data storage are major vectors for breaches to occur in, thus Content Filter and Anti-Virus/Malware capabilities should be at the top of your implementation or improvement list if not currently in place.

Data Backups are even more essential than ever, and Security patching of your Operating Systems and Applications is a must, asap.

If your cyber defences are breached by the file encryption type of Ransomware, monitoring is critical for the early detection of activity in order to avoid a full catastrophe of losing access to all files. We can send you a SMS text notification in less than 1 minute of a file having been encrypted (like Ransomware), so you can get onto stopping the process before it gets worse.

This early detection allows for fast intervention before every file is rendered unusable, which would then require a lengthy outage for the restoration from Backups. (The Backups are good, right?)

Disk Wiper malware is also a major worry, as once deployed, it will destroy the data of your Hard Disk Drive and change the Master Boot Record so your server will not boot up anymore. It will be dead.

Imagine if that is your Domain Controller!  (Now that would cause a big headache!)

Having a Monitoring solution in place does not take away the need for Cyber Intelligence tools or an Intruder Detector System, nor an Email & Internet content filter solution, nor remove the need for a SQL DBA, nor do away with Malware scanning.

However, having a monitoring solution in place will most definitely supplement the other tools in your armoury and provide insight to potential Cyber threats by detecting and warning you about these issues:  

· File modification activity

· High Network bandwidth utilisation

· Unusual CPU and Memory use

· Downed servers

· Windows Service changes

· Suspicious/failed login activity 

· Critical Windows Event logs 

· Failed backups 

Please get in contact if you would like us to be your Infrastructure monitoring person!