{"id":38260,"date":"2020-02-06T15:17:05","date_gmt":"2020-02-06T11:17:05","guid":{"rendered":"https:\/\/www.msp360.com\/resources\/?p=38260"},"modified":"2022-07-14T17:52:26","modified_gmt":"2022-07-14T13:52:26","slug":"ransomware-attack-scenarios-and-how-to-be-protected","status":"publish","type":"post","link":"https:\/\/www.msp360.com\/resources\/blog\/ransomware-attack-scenarios-and-how-to-be-protected\/","title":{"rendered":"Ransomware Attack Scenarios"},"content":{"rendered":"

One of the reasons why ransomware\u2019s influence is so great is that there are multiple ways in which ransomware attacks can occur. As an MSP, protecting your clients\u2019 businesses from ransomware requires being familiar with all of the ransomware attack scenarios and taking steps to defend against each of them.<\/p>\n

<\/p>\n

With that need in mind, this article describes common ransomware attack scenarios and what to do if one of these attacks affects your clients.<\/p>\n

Types of Ransomware Attacks<\/h2>\n

Phishing<\/h3>\n

Phishing is a type of exploit where an attacker convinces someone inside an organization to take an action (such as clicking a link inside an email or revealing login credentials) that allows the organization\u2019s systems to be compromised. If attackers can gain this access, they can encrypt the organization\u2019s data and hold it to ransom.<\/p>\n

Email is the most common vector for executing phishing attacks, but it\u2019s not the only one. Phone calls, SMS messages and even physical documents can be distributed to employees inside an organization in an attempt to trick them into revealing sensitive information.<\/p><\/blockquote>\n

When phishing, attackers often make a message appear to come from someone legitimate by, for example, creating a fake email account pretending to belong to a person from the same organization or to a vendor you partner with. These strategies can make it easier to convince someone inside the organization to fall for the phishing attack, even if anti-phishing systems mark the message as coming from outside their own organization.<\/p>\n

Further reading<\/span> Types of Phishing Attacks<\/a><\/p>\n

\n
\n
FREE ASSETS<\/div>\n
MSP\u2019s Assets to Stay Safe from Phishing<\/div>\n
Check out our assets that will help you to minimize the risk of a phishing attack, reduce the possible damage, and increase security awareness.<\/div>\n\"CTA\"<\/a><\/span><\/span>\n<\/div>\n
\"WP<\/div>\n<\/div>\n

Remote Desktop Protocol<\/h3>\n

Remote Desktop Protocol, or RDP, is a widely used protocol for accessing computers from remote locations. Because RDP gives remote users the same level of access to a system that they would have if they were sitting in front of it and logged in, compromising RDP is a ransomware attacker\u2019s dream scenario.<\/p>\n

Although RDP is secure when configured properly, there are several ways in which poorly secured RDP connections could be used to install ransomware inside an organization:<\/p>\n