Interlock Ransomware

The Interlock ransomware entered your system by one of several ways:

• Phishing

• Stolen Credentials

• Exploitation of Vulnerable Remote Access Services

We recommend you adopt policies to:

1. Educate your staff on the importance of cyber security

2. Use strong passwords

3. Multi-factor authentication

4. Remove old users

5. Perform regular backups

6. Deploy timely updates to software and systems

After recovering from a Interlock ransom attack, Zensec recommends that you update your business continuity plan to account for lessons learnt during this attack & recovery.

After an Interlock ransomware attack, your company must activate its incident response plan to isolate affected systems, preserve sensitive data, and limit lateral movement. Engage a specialist like Zensec to assess your exposure, monitor for data leaks, and strengthen your organisation’s defences against future ransomware incidents.

The NCSC is the UK National Cyber Security Centre. They provide cyber security guidance and support, helping to make the UK the safest place to live and work online. They have defined a Cyber Incident Response procedure and they have approved and accredited suppliers to provide this service.

https://www.ncsc.gov.uk/

As a recognised Assured Service Provider by the National Cyber Security Centre (NCSC), Zensec provide comprehensive cyber risk management services that are designed to Protect, Detect & Mitigate cyber security threats across the UK.

Report Fraud is the UK's national reporting centre for fraud and cybercrime. Whether you have been scammed, defrauded, or experienced cybercrime in England, Wales, or Northern Ireland, Report Fraud offers a central point of contact for information on fraud and financially motivated cybercrime.

https://www.reportfraud.police.uk/https://www.actionfraud.police.uk/

Yes. There's a possibility that some of the lost data falls under the category of "Personal Data" belonging to your customers. It's your legal responsibility to safeguard this data, even if it has been lost. Additionally, you may need to notify the Information Commissioner's Office at https://ico.org.uk/.

Your insurer or legal counsel will provide guidance on the necessary steps and how to move forward in this situation.

Zensec has experience collaborating with insurers and legal professionals and can offer support in managing this relationship during this challenging period.

A ransomware attack presents the most significant threat to your business by:

• Disabling your access to systems, which could hinder machinery operation or impede progress through your business processes.

• Blocking access to critical data concerning suppliers, shipments, customers, orders, or steps in your business workflow.

In the event of a business interruption, identifying your position in the supply chain and sustaining operations can be challenging. If the disruption continues, maintaining business continuity becomes critical. Once systems and data are restored, addressing backlogs and establishing future operational protocols are essential.

Ransomware ranks only behind receivership in terms of its capacity to incapacitate a business.