Definition

Ransomware is malicious software that encrypts files on computers and servers and demands money to unlock them. It usually enters through a fake e-mail attachment, a remote desktop left open to the internet or an unpatched system; it spreads quietly for days, finds and deletes backups, then encrypts the whole network at once. Paying does not guarantee the files come back and invites the attacker again. Protection has four layers: patched systems and MFA, centrally managed endpoint security, network segmentation and, most important, an offline or immutable backup that cannot be reached from the network. What to do during an attack must be in a written plan; the moment of the attack is too late to decide.

How SMB Teknoloji uses it

We build all four layers together: patching and MFA, endpoint security, network segmentation, offline backup; we write the incident response plan and rehearse the restore.