Cyber Security
Ransomware detection: stopping an attack before everything is encrypted
An extra layer of security that recognises the first signs of ransomware, so we step in before your files and systems are encrypted.
The problem
Ransomware is one of the biggest threats to small and medium businesses. Criminals encrypt your files and systems and demand a ransom to release them. Such an attack can spread within a short time from one laptop to shared folders, servers and the rest of your network.
With ransomware every minute counts. That is why, alongside antivirus, we deploy ransomware detection: an extra layer that looks specifically for the first signs of ransomware, so we can step in before the damage becomes serious.
What will you notice?
You will not notice it in your daily work. It is a safety net for the moment that matters, and then every minute counts.
What it does for you
How Ransomware detection helps you
- 01
Spotted early
Ransomware behaves differently from ordinary programs: lots of files are changed or encrypted within a short time. That pattern stands out, even if the ransomware itself is still unknown.
- 02
Stopping the spread
The faster action is taken, the less damage. By isolating an affected device quickly, you prevent the attack from spreading to other devices and the network.
- 03
An extra layer on top of antivirus
Ransomware detection works together with the other security on your devices: antivirus, and with Standard also EDR. If something still slips through, there is a safety net that looks specifically for ransomware.
How it works
How we arrange it
Not a technical story, but what happens and who does what.
Plan an introduction- Step 1
On every device
Ransomware detection runs on all laptops and PCs we manage, alongside the antivirus (and with Standard, EDR).
- Step 2
Watchful in the background
It continuously looks for the signs of ransomware, such as large numbers of files being encrypted or changed within a short time.
- Step 3
Stopped automatically
If ransomware is recognised, the encryption is stopped automatically and the laptop is taken off the network. We get an alert straight away, so no time is lost.
- Step 4
Investigate and recover
We then find out what happened, clean up the device and, together with the backup, make sure you are back at work as quickly as possible.
Frequently asked questions
Questions about Ransomware detection
Is your question not listed? Feel free to call us, we are happy to think along with you.
What is ransomware?
Ransomware is software that holds your data hostage: criminals encrypt your files and systems and demand a ransom to release them. An attack can bring a business to a standstill for days or even weeks.
Why ransomware detection on top of antivirus?
No security stops everything. Ransomware detection looks specifically at the behaviour of ransomware. This gives you an extra safety net for the attack that does the most damage.
Do I still need a backup?
Yes. Ransomware detection helps limit the damage, but a good backup makes sure your data can always be recovered. That is why we also include Microsoft 365 Backup as standard in every proposal.
Is this included in all packages?
Yes. Ransomware detection is included in all Modern Workplace packages. With Standard we add EDR with behavioural analysis and a 24/7 SOC.