Install
Software designed to find and remove viruses from your device, and stop new ones getting in.
Protect yourself against ransomware
While there are steps you can take to recover from a ransomware attack, the best thing you can do is understand how to prevent one in the first place.
What it is
Ransomware is a type of
wanting to cause harm a set of instructions for your computer, made up of code. Apps, games, and browsers are all examples of software.
How to protect yourself
-
Update your devices
Always update your operating system and your apps when new versions are available. You can set this up to happen automatically with Windows and a lot of other applications like Office.
-
Install an antivirus
software on your computer if you don’t already have it and update it regularly. Scan for viruses regularly and clean up any infections straight away. -
Back up your devices
Make sure you back up your files regularly. This includes the files on your computer, your phone, and any other devices you have. You can:
- get an external hard drive and do an 'offline' or 'cold' backup
- sign up to a cloud-based service like Dropbox and do a cloud backup.
Consider doing both — have one offline backup on an external hard drive, and do another backup that's kept in the cloud.
-
Don't enable macros in Microsoft Office
A 'macro' is a series of commands you can set up to automate a regular or repeated task in Microsoft Office. Whenever you need to perform the task, you can run the macro and it will do it for you. However, having macros enabled can pose a security risk – it can allow malware, like ransomware, to access your computer.
If you're not sure if you have macros enabled, check in your Office settings.
Get help
If you’ve been targeted by a ransomware attack, you should:
- restore your system from your most recent backup, or
- reinstall your operating system if you don’t have a backup, but note that this may erase all of your files.
You could also consider backing up your computer to a new external hard drive before you reinstall the operating system. The files might be able to be decrypted at a later date.
If you're not sure how to do this, or need help to do it, talk to your IT support person or a local computer services company. They can:
- check to see if you have 'real' ransomware on your computer – sometimes, scammers will just claim to have installed ransomware in your device as a tactic to get you to make a payment to them
- restore your computer to its factory settings and rebuild it for you if they can’t remove the ransomware. Talk to them about backing up the files on your computer first, incase they can be decrypted later
- advise you on security to help you stay protected in the future
- install security protection for you.
Report the issue to CERT NZ
You can also report an online issue or security incident like this to us at CERT NZ.