RIT Information Security Alert -- Ransomware Attack
Why am I receiving this message?
RIT computers have been attacked with CryptoLocker ransomware. Ransomware is malware that encrypts contents of your computer and then demands a payment in order to receive the decryption key and retrieve the data. Ransomware has been around for a couple of years now, but there's been a spike in activity over the last week, and yesterday, a couple of RIT computers were infected.
How do I protect myself against a ransomware attack?
- Make sure your antivirus running and is up to date. Many antivirus programs detect the malware.
- Ransomware can infect a computer by a user clicking on a malicious link or through a trojan masquerading as another program. Do not click on links in email without being sure the link goes where you think it does. Hover your cursor over the link to reveal where the link goes.
- The malicious link may be in any of the spam emails we've been receiving at RIT. Don't click on the links!
- Back up your data! if you have a back up, you'll probably be able to restore the "kidnapped" data.
- Report suspicious emails to firstname.lastname@example.org and/or to email@example.com.
For More Information
- Ransomware removal: What is Ransomware: Microsoft Security www.microsoft.com/security/resources/ransomware-whatis.aspx
- Fiendish CryptoLocker ransomware: Whatever you do, don't PAY http://www.theregister.co.uk/2013/10/18/cryptolocker_ransmware/