In 2021, there was a significant increase in the use of ransomware against organisations across the world.

Ransomware is malware that encrypts users’ data and grants network access to threat actors. Once they have access to an organisation’s data, they threaten to leak sensitive information and halt business operations until the victim pays a ransom, hence the name.

Unfortunately, paying the ransom does not guarantee that the threat actor will unencrypt your files or keep your data secure. In fact, the U.S. government’s Cybersecurity and Infrastructure Security Agency (CISA) does not recommend paying ransoms at all, since the more profitable ransomware is, the more common and complex it could become.

Instead, CISA – alongside the United Kingdom’s National Cyber Security Centre (NCSC-UK) and the Australian Cyber Security Centre (ACSC) – has specific recommendations for how to prevent ransomware attacks and minimise their impact.

How Has Ransomware Become More Common and More Dangerous?

The increase in ransomware attacks can be attributed to the COVID-19 pandemic in more ways than one: First, the use of cloud networks by businesses, government bodies, and schools has made sensitive information and critical infrastructure accessible to bad actors on the web. Second, the pandemic has lowered the income of many households as lockdowns and supply-chain issues have persisted, making online illicit activities – like the use of ransomware – a more accessible way of earning money.

As ransomware has become more profitable and accessible, ransomware enterprises have become more complex. There are now entire organisations with customer support services that walk victims through the process of paying the ransoms and unencrypting their files.

These enterprises have increased their profitability by selling stolen data to other scam artists. That means that once a victim’s data has been stolen, multiple criminal organisations could use it to threaten and extort them.

How Could Ransomware Get Into My Network?

The most common strategy threat actors employ is phishing. Phishing is a fear tactic in which cyber criminals pose as a legitimate entity – such as the IRS, law enforcement, or antimalware software – and contact individuals to inform them of a problem – say, an issue with their most recent tax filing, an arrest warrant, or most ironically, a security breach in their network.

To address the problem, they tell users to click on a link, which then downloads ransomware onto the user’s computer, giving the threat actor access to their data and network.

How Can I Prevent Ransomware from Impacting My Organisation?

Here are the measures that CISA, ACSC, and NCSC-UK recommend an organisation take to prevent ransomware attacks:

• Keep software up to date.
• Train employees on how to spot phishing and how to handle ransomware attacks.
• Use unique passwords and enable multi-factor authentication (MFA), especially on administrative accounts.
• Segment networks so that breaches only impact portions of it rather than the whole thing.
• Limit operations that take place on the cloud.
• Enable spam filters.
• Back up files regularly, separately from one another, and onto a separate network.

Most importantly, they recommend not paying the ransom, since that would encourage cybercriminals to continue using ransomware to extort money.

How Should I Respond to a Ransomware Attack?

Should ransomware breach your organisation’s network, it is important to act fast and follow these best practices:

1. Record the name of the file that was downloaded and the contents of the ransom note. This can be done quickly by taking a picture of the screen with your phone. It’s also useful when working with IT professionals and the authorities.
2. Turn off the infected device. This interrupts the encryption process, and it may even prevent ransomware from spreading through the network. Do not turn the device back on yourself – enlist the help of an IT professional.
3. Manually disconnect all other devices in the network. By turning them off using the power button or by unplugging them, they are disconnected from the network, which may slow the spread.
4. Change your passwords. Enable MFA if you haven’t already.
5. Locate backups. Do not connect uninfected backups to the network, as that will expose them to the malware. If you have no uninfected backups, an IT professional may be able to help recover your encrypted data, but there is no guarantee that they’ll be able to.
6. Remove ransomware. This is done by wiping infected drives and devices and reinstalling their operating systems, which permanently deletes the data that was stored on them.
7. Restore information from the backup. Once your computer and network are ransomware-free, it is safe to upload uninfected backups.
8. Notify authorities of the attack. This can help to protect you from being targeted again and prevent threat actors from targeting others.

While ransomware has become more commonplace in the era of working from home, your organisation can take steps to prevent and recover from attacks. By quickly responding to security breaches and reporting them, you minimise both their impact on your organisation and the likelihood that they will strike again.

The number of connected devices is growing rapidly, with the Internet of Things (IoT) enabling businesses to improve operations, marketing, and customer service while using fewer resources and saving money.

Many IoT applications require wide bandwidth, low latency and performant network connectivity after the proof-of-concept phase to transfer and integrate data. Businesses are often used to configuring a few devices on “plug and play” wireless networks. However, not all networks are designed with IoT in mind, and scaling from 100 to hundreds of thousands of sensors is not straightforward. Adopters often have difficulty scaling a solution. 

IoT is frequently used to transform businesses, generate new business models, and disrupt whole industries. Aruba is the industry leader in wired, wireless and security networking solutions for today’s experience edge. Aruba’s network solutions can grant scale and mitigate hurdles in IoT projects. This article explores the effectiveness of Aruba solutions in large-scale IoT efforts. 

Case Study: Golden State Warriors Stadium 

Chase Center, home of the Golden State Warriors and host to countless music and cultural events, is technologically equipped with leading solutions from HPE and Aruba. The whole estate exemplifies how IoT can improve customer experiences, while recovering from the pandemic and re-engaging the community. 

The data centre is the core of the building, powering the visitor and employee experience. The Command Center oversees over 1,100 televisions, 36 restaurants, 9,500 square feet of LEDs, and the NBA’s largest visual board. Over 7,500 edge devices, including Aruba WiFi 6 access points, point of sale registers, IP-TV displays, building management devices, security cameras, lighting controls, and VOIP telephones, distribute and collect data throughout the whole campus. 

The network is comprised of an Aruba core and edge switches. Aruba Bluetooth low-energy beacons allow location services within a mobile app, while ClearPass Policy Manager secures the network and authenticates users and devices. Aruba AirWave delivers real-time operational telemetry, which is essential on an event day. 

The solution significantly impacts growth and engagement. The Golden State Warriors now have a rapid, versatile, and responsive IT infrastructure with the capacity for growth enabled by HPE and Aruba. The structure is a great example of how to start small and scale IoT technology to meet growing company demands. 

Case Study: Disney theme parks 

When people visit Disney parks, one thing they’re sure to love is the engaging guest experience – but they may not realise how much IoT technology contributes.

Disney parks aim to provide each guest with the most immersive experience possible, allowing them to become a part of the story. Disney is continuously implementing new approaches and processes to understand better what is happening at various park locations. Large volumes of data are collected to closely monitor the condition of the attractions. One of the main components enables Disney to link several data streams. Because everything is interconnected, Disney can offer more interesting and immersive consumer experiences. 

The happiest place on the planet is also one of the most connected. Aruba WiFi infrastructure and IoT solutions have been used at Disney resorts to improve employee and visitor experiences by providing connection, security, and bridging the digital and physical worlds.

Numerous Disney properties are using Aruba’s solutions to improve on-site operations. Disney uses Aruba’s location-ready access points, ClearPass for wireless authentication and secure access, Airwave for network administration, and Aruba ALE (Analytics and Location Engine).

Aruba’s WiFi infrastructure makes processes at Disney resorts more efficient and effective. Aruba’s Edge Services Platform (ESP) offers parks an open networking solution that interacts seamlessly with ecosystem partners and provides a single point of management and configuration for all parks and resort areas. 

The large-scale implementation at Disney parks demonstrates the agility and scalability of IoT and how it can be used to assist businesses of all sizes. 

Conclusion 

To serve as a platform for addressing future business objectives, IoT solutions should be scalable and adaptive. The Aruba solutions used in the Chase Center and Disney examples above are extremely scalable and extensible to support a variety of use cases, from a small network of devices to a large web. 

IoT is driving innovation across many industries, and when businesses transition from a prototype IoT project to full-scale production, they should ensure their infrastructure is sufficient. Rather than investing in a separate overlay network to aid employee safety, customer experiences, or other IoT use cases, businesses can instead use a single platform. 

A separate overlay network isn’t required if you invest in Aruba’s unique access points, which support Bluetooth, Zigbee, and Wi-Fi 6. If a new protocol is required, Aruba WiFi 6 APs include a USB port where a dongle can be plugged in. When APs support various protocols, they can communicate more effectively with app-enabled services such as automated door locks and climate controls. This improves both the consumer and staff experience. Contact us, your IT partner, to learn how Aruba and HPE can help start or scale your IoT initiative.