Ransomware Prevention Tips

By -
During recent times in last 6 months, we have seen very deadly ransomware attacks across the world -"Wannacry" and "Petya" ransomware. With these 2 ransomwares hiting the market, even a common man has been able to understand the importance of cyber security.

Soon android ransomware might also be coming up in which can create a havoc situation for a normal user, where entire phone will be formatted and all data will be lost.

While ransomware does only encrypt files/folders and makes it inaccessible, the most important part of the prevention tips here is Backup of Data.


Users in organizations will be prevented as organizations do follow strict protection guidelines, but still travelling users will still need to bit cautions.

  1. Back Up your Data at regular intervals. This drive should not be connected to infected system, till clean up is done
  2. Do not open unknown suspicious mails or attachments.
  3. Try not to click on any hyperlinks that are circulated through instant messaging or chat platforms
  4. Secure browser and upto date browser is must for protection. Adobe, java plugins should be updated to secure versions
  5. If the system is infected, immediately, remove from network be intranet or internet
  6. If possible, disable windows powershell as it can automatically execute tasks
  7. Windows firewall, threat protection be enabled and updated
  8. Added antivirus updated could be add a layer of security. Enable scanning of compressed/zip files
  9. Block popups from browsers. Use secure addons to block browser popups
  10. Video/audio autoplay should be disabled
  11. Filesharing to be disabled
  12. Block TOR IP Address as onion routers can be used to initiate and propagate attacks
  13. Auto exe run should be disabled

 All the above steps will help protect users in case of any attacks, organizations should surely check for implementation of strict policies and be pushed to all users.

Comments

Post a Comment

Popular posts from this blog

Payment Gateway Security Testing Checklist

By -
Below given are some of the possible testing scenarios, which may prove to be useful in performing payment gateway testing. Whether all the types of payment options available through the payment gateway are selectable or not.  Whether each payment option is showing its specification and requirements after being selected by the user.What happens, after the failure of the payment process or if the session ends.  To check, if the payment gateway is allowing to enter data in the blank fields of the card number, card name, expiry date and CVV number.  To examine, how the payment gateway system behaves or responds, after leaving one or more fields, blank such as leaving CVV number field, blank, etc.  Whether the user is being redirected to the application page, after the successful completion of the payment process.  Applying language change, during the payment process. Checking successful integration of
Read more

Network Security VAPT Checklist

By -
Network Security VAPT Checklist Lets talk about the scope first. If you are given a 500 machines to perform VAPT, then here is your scope. Single machine can have 65535 ports open. Any single port can deploy any service software from the world. For example FTP can be run on smartftp, pureftpd etc. Any single FTP software version (for example pureftpd 1.3.3a) can have number of vulnerabilities available. So if you multiply all of these, then it is impossible for any auditor to go ahead and probe all ports manually and find services manually. Even if he/she is able to do it, it is impossible to check all vulnerabilities that are pertaining to a single port of a single machine. Hence we have to rely on scanners such as nexpose, nessus, openvas, coreimpact etc. Here are some quick tools and test cases that one can perform on commonly found ports in the network pentest. Ø   Identify live hosts ·          Ping ·          Hping ·          Nmap Ø   Identify OS type ·
Read more

How to dump Database using Sqlmap

By -
Image
Database Dump using SQLMap Find out the parameter of application that is vulnerable to SQL injection . Vulnerable Parameter  : “User ID” Enter ‘ and then click on Submit button. will get the SQL Error. Now Intercept the Request in burp. Copy the incepted request and save it in sqlmap installed directory. Open CMD and go to the directory where SQL map is installed (C:/sqlmap) and type sqlmap.py –r sqlinjection (filename) –-dbs and then enter. (dbs is used for dump database name). Then type Y and enter. Type N and enter, it display all the database . Now we have to find out the table in database. Type sqlmap.py –r sqlinjection –D dvwa(database name) –tables.     In the above snap we got the table name in dvwa database. Then we have find out the column name. type sqlmap.py –r sqlinjection –d dvwa –T users –column. Now we are going to dump the userid and password from column. Type sqlmap.py –r sqlinje
Read more