Under Attack

In the event that you are under attack, kindly take the following quick action:

a) Disconnect the Network Interface Cards of the compromised devices from the network.
b) Cut off network and wireless Internet connectivity.
Keep backups off the network and, if at all possible, write protect them.
c)  If you have cloud backups, reset your login credentials and log in from somewhere else than your company’s systems.
d)  Disconnect switches to stop lateral infections from starting or spreading.
e)  It is advised that you DO NOT turn off a device that is known to be encrypting data. You might damage the operating system or other programs, making it impossible to recover with the keys.
f)   Avoid communicating over the network, business email, IP phones, Teams, Slack, and other platforms as threat actors are frequently monitoring and/or reading these channels.
g)   Furthermore, nothing you say—verbally or in writing—to partners, staff, or anybody else can be taken back.
h)  Wait until you have the assistance you require before communicating with the threat actor. This might cause problems and set off a timer. Don’t rush to settle; hiring the appropriate negotiator can make a big difference in the outcome.
i)  Before messaging anyone who isn’t a decision-making executive or a staff member or service provider who is essential to your recovery, you should speak with a lawyer known as the Breach Council. Ransomware is not just a technological emergency but also a legal one.
j)  Lastly, we advise you to contact us using a phone that is unrelated to your company. We are accessible around-the-clock, every day of the year, and we can start assisting you with the appropriate answer right away.