{"id":120614,"date":"2022-08-30T08:00:00","date_gmt":"2022-08-30T15:00:00","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?p=120614"},"modified":"2023-05-15T23:00:05","modified_gmt":"2023-05-16T06:00:05","slug":"cyber-signals-3-strategies-for-protection-against-ransomware","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/","title":{"rendered":"Cyber Signals: 3 strategies for protection against ransomware"},"content":{"rendered":"\n<p>The \u201cas a service\u201d business model has gained widespread popularity as growing cloud adoption has made it possible for people to access important services through third-party providers. Given the convenience and agility of service offerings, perhaps it shouldn\u2019t be surprising that the \u201cas a service\u201d model is being used by cybercriminals for nefarious purposes.<\/p>\n\n\n\n<p>Ransomware as a service (RaaS) involves cybercriminals purchasing and selling access to ransomware payloads, leaked data, RaaS \u201ckits,\u201d and many other tools on the dark web. We explore this topic in the second edition of <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/business\/security-insider\/anatomy-of-an-external-attack-surface\/extortion-economics\/\">Cyber Signals<\/a>, Microsoft\u2019s quarterly brief that shines a spotlight on threat topics informed by our 43 trillion signals of data and research by more than 8,500 security experts. It\u2019s one of the many resources available on <a href=\"https:\/\/www.microsoft.com\/security\/business\/security-insider\/\">Microsoft Security Insider<\/a>, a site where you\u2019ll find the latest cybersecurity insights and threat intelligence updates.<\/p>\n\n\n\n<p>At Microsoft, we have been tracking the trend of <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/05\/09\/ransomware-as-a-service-understanding-the-cybercrime-gig-economy-and-how-to-protect-yourself\/\">human-operated ransomware<\/a>. These threats are driven by humans who make decisions at every stage of the attack, making them particularly impactful and destructive to organizations. RaaS operations, such as REvil and the now-shutdown Conti, have the malware attack infrastructure and even stolen organizational data necessary to power ransomware activities. They then make these tools available on the dark web for a fee. Affiliates purchase these RaaS kits and deploy them in company environments. Like legitimate \u201cas a service\u201d offerings, RaaS may even include customer service support, bundled offers, and user review forums.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Ransomware as a service: Appealing to cybercriminals, challenging for companies<\/h2>\n\n\n\n<p>In more than 80 percent of ransomware attacks, the cybercriminals exploited common configuration errors in software and devices, which can be remedied by following <a href=\"https:\/\/query.prod.cms.rt.microsoft.com\/cms\/api\/am\/binary\/RE50Mog\" target=\"_blank\" rel=\"noreferrer noopener\">security best practices<\/a>. This means that ransomware actors are not using any new and novel techniques. The same guidance around timely patching, credential hygiene, and a thorough review of changes to software and system settings and configurations can make a difference in an organization\u2019s resilience to these attacks. The other challenge is that some actors have opted to forgo the ransomware payload. They exfiltrate the victim organization\u2019s data and extort money by threatening to release their data or sell it on the dark web.<\/p>\n\n\n\n<p>As a result, companies that limit their hunting efforts to looking for signs of just the ransomware payload are at a greater risk of a successful breach and extortion. Finally, the ease of RaaS for cybercriminals means it is highly likely to remain a challenge for organizations worldwide.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Cybercrime\u2014including ransomware, business email compromise schemes, and the criminal use of cryptocurrency\u2014comes at a significant cost. The Federal Bureau of Investigation\u2019s 2021 Internet Crime Report found that potential losses exceeded USD6.9 billion in 2021.<sup>1<\/sup><\/p><p>In the European Union, the European Union Agency for Cybersecurity (ENISA) reported that about 10 terabytes of data were stolen each month by ransomware threat actors between May 2021 and June 2022, and a whopping 58.2 percent of that stolen data involved employees&#8217; personal information.<sup>2<\/sup><\/p><\/blockquote>\n\n\n\n<p>Ransomware as a service offers a few advantages to cybercriminals:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Lowers the barrier to entry for cybercriminals interested in committing ransomware attacks because these ransomware kits enable people with minimal technical expertise to deploy ransomware.<\/li><li>Conceals the identity of the cybercriminals behind the attack because anyone with a laptop and a credit card can search the dark web, purchase RaaS kits, and join the RaaS gig economy. As a result, governments, law enforcement, media, security researchers, and defenders face a bigger challenge in determining the culprit behind the attacks.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">What Microsoft is doing to share threat intelligence insights<\/h2>\n\n\n\n<p>Microsoft gains deep insights into the ever-evolving threat landscape and threat actors by analyzing more than 43 trillion threat signals daily and leveraging the unique skills of more than 8,500 experts\u2014threat hunters, forensics investigators, malware engineers, and researchers supporting our threat intelligence community and customers. These experts specialize in dedicated areas, such as vulnerabilities, threat actors, ransomware, supply chain risk, social engineering, and geopolitical issues.<\/p>\n\n\n\n<p>Microsoft focuses on gathering intelligence about these cybercriminals\u2019 behaviors, tactics, tools, and techniques to truly understand the end-to-end scope of their attacks and operations. We believe cybersecurity intelligence should be shared broadly. You can see our insights in our <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/microsoft-security-intelligence\/\">security intelligence blogs<\/a>, the <a href=\"https:\/\/www.microsoft.com\/security\/business\/microsoft-digital-defense-report\">Microsoft Digital Defense Report<\/a>, and Cyber Signals, our quarterly briefing, which can be found on Security Insider, our source for threat insights and guidance.<\/p>\n\n\n\n<p>We understand that managing the myriad tasks necessary to grow a business gives organizations precious little time to stay updated on the latest security threats, let alone to preempt and disrupt extortion threats. We are committed to sharing the threat insights we have gathered with the cybersecurity community to help organizations secure their employees, customers, and partners. We are all cybersecurity defenders. Together, we can stay ahead of these threats.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Strategies to protect your organization<\/h2>\n\n\n\n<p>Because cybercriminals rely on security vulnerabilities they can exploit, companies can help block attackers by investing in integrated threat protection across devices, identities, apps, email, data, and the cloud. Here are three major strategies to help protect your environment from RaaS attacks:<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li><strong>Prepare to defend and recover<\/strong>: Adopt a <a href=\"https:\/\/www.microsoft.com\/security\/business\/zero-trust\">Zero Trust<\/a> approach, which means never trusting an identity but instead always fully authenticating, authorizing, and encrypting every access request before granting access. This strategy also involves taking measures to secure your backups and protect your data.<\/li><li><strong>Protect identities from compromise<\/strong>: Safeguard network credentials and prevent the lateral movement used by attackers to evade detection while moving through your organization in search of assets to exfiltrate or destroy.<\/li><li><strong>Prevent, detect, and respond to threats<\/strong>: Leverage comprehensive prevention, detection, and response capabilities with integrated <a href=\"https:\/\/www.microsoft.com\/security\/business\/threat-protection\">security information and event management (SIEM) and extended detection and response (XDR)<\/a>. This means understanding typical attack vectors, like remote access, email and collaboration, endpoints, and accounts, and taking steps to prevent attackers from getting in. And, very importantly,\u00a0ensure that along with outside-in protection you are also doing inside-out protection focused on data security, information protection, and insider risk management.<\/li><\/ol>\n\n\n\n<p>You can find more in-depth security guidance in <a href=\"https:\/\/www.microsoft.com\/security\/business\/security-insider\/anatomy-of-an-external-attack-surface\/extortion-economics\/\">Cyber Signals<\/a> and <a href=\"https:\/\/www.microsoft.com\/security\/business\/security-insider\/\">Security Insider<\/a>.<\/p>\n\n\n\n<p>A great security posture starts with understanding the threat landscape. Microsoft remains deeply committed to partnering with our entire community on sharing intelligence and building a safer world for all together.\u00a0<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Learn more<\/h2>\n\n\n\n<p>To stay up-to-date on ransomware as a service and other threat insights and guidance, bookmark <a href=\"https:\/\/www.microsoft.com\/security\/business\/security-insider\/\">Microsoft Security Insider<\/a>.<\/p>\n\n\n\n<p>To learn more about Microsoft Security solutions,&nbsp;<a href=\"https:\/\/www.microsoft.com\/security\/\">visit our&nbsp;website<\/a>.&nbsp;Bookmark the&nbsp;<a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\">Security blog<\/a>&nbsp;to keep up with our expert coverage on security matters. Also, follow us at&nbsp;<a href=\"https:\/\/twitter.com\/@MSFTSecurity\">@MSFTSecurity<\/a>&nbsp;for the latest news and updates on cybersecurity.<\/p>\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\"\/>\n\n\n\n<p><sup>1<\/sup><a href=\"https:\/\/www.ic3.gov\/Media\/PDF\/AnnualReport\/2021_IC3Report.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Internet Crime Report<\/a>, Federal Bureau of Investigation. 2021.<\/p>\n\n\n\n<p><sup>2<\/sup><a href=\"https:\/\/www.enisa.europa.eu\/news\/ransomware-publicly-reported-incidents-are-only-the-tip-of-the-iceberg\" target=\"_blank\" rel=\"noreferrer noopener\">Ransomware: Publicly Reported Incidents are only the tip of the iceberg<\/a>, European Union Agency for Cybersecurity. July 29, 2022.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>New Cyber Signals shows more than 80 percent of ransomware attacks can be traced to common configuration errors. Here&#8217;s how we can get ahead of these attacks together as a cyber defender community.<\/p>\n","protected":false},"author":162,"featured_media":120620,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ms_queue_force_push":false,"ms_queue_id":"","ep_exclude_from_search":false,"_classifai_error":"","_classifai_text_to_speech_error":"","footnotes":""},"content-type":[3663],"topic":[3687],"products":[3690,3694],"threat-intelligence":[3739],"tags":[],"coauthors":[2400],"class_list":["post-120614","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","content-type-research","topic-threat-intelligence","products-microsoft-defender","products-microsoft-defender-for-endpoint","threat-intelligence-vulnerabilities-and-exploits"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v24.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How security professionals can stay ahead of ransomware | Microsoft Security Blog<\/title>\n<meta name=\"description\" content=\"Here&#039;s how we can get ahead of ransomware attacks together as a cyber defender community, according to new Cyber Signals research.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How security professionals can stay ahead of ransomware | Microsoft Security Blog\" \/>\n<meta property=\"og:description\" content=\"Here&#039;s how we can get ahead of ransomware attacks together as a cyber defender community, according to new Cyber Signals research.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/\" \/>\n<meta property=\"og:site_name\" content=\"Microsoft Security Blog\" \/>\n<meta property=\"article:published_time\" content=\"2022-08-30T15:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-05-16T06:00:05+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/08\/Picture1-630564a85f000.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"800\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Vasu Jakkal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/08\/Picture1-630564a85f000.jpg\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Vasu Jakkal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/\"},\"author\":[{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/author\/vasu-jakkal\/\",\"@type\":\"Person\",\"@name\":\"Vasu Jakkal\"}],\"headline\":\"Cyber Signals: 3 strategies for protection against ransomware\",\"datePublished\":\"2022-08-30T15:00:00+00:00\",\"dateModified\":\"2023-05-16T06:00:05+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/\"},\"wordCount\":1123,\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/08\/Picture1-630564a85f000.jpg\",\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/\",\"name\":\"How security professionals can stay ahead of ransomware | Microsoft Security Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/08\/Picture1-630564a85f000.jpg\",\"datePublished\":\"2022-08-30T15:00:00+00:00\",\"dateModified\":\"2023-05-16T06:00:05+00:00\",\"description\":\"Here's how we can get ahead of ransomware attacks together as a cyber defender community, according to new Cyber Signals research.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/#primaryimage\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/08\/Picture1-630564a85f000.jpg\",\"contentUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/08\/Picture1-630564a85f000.jpg\",\"width\":1200,\"height\":800,\"caption\":\"A maze with multiple dots of different colors surrounding a large circle.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cyber Signals: 3 strategies for protection against ransomware\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\",\"name\":\"Microsoft Security Blog\",\"description\":\"Expert coverage of cybersecurity topics\",\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization\",\"name\":\"Microsoft Security Blog\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png\",\"contentUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png\",\"width\":512,\"height\":512,\"caption\":\"Microsoft Security Blog\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How security professionals can stay ahead of ransomware | Microsoft Security Blog","description":"Here's how we can get ahead of ransomware attacks together as a cyber defender community, according to new Cyber Signals research.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/","og_locale":"en_US","og_type":"article","og_title":"How security professionals can stay ahead of ransomware | Microsoft Security Blog","og_description":"Here's how we can get ahead of ransomware attacks together as a cyber defender community, according to new Cyber Signals research.","og_url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/","og_site_name":"Microsoft Security Blog","article_published_time":"2022-08-30T15:00:00+00:00","article_modified_time":"2023-05-16T06:00:05+00:00","og_image":[{"width":1200,"height":800,"url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/08\/Picture1-630564a85f000.jpg","type":"image\/jpeg"}],"author":"Vasu Jakkal","twitter_card":"summary_large_image","twitter_image":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/08\/Picture1-630564a85f000.jpg","twitter_misc":{"Written by":"Vasu Jakkal","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/#article","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/"},"author":[{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/author\/vasu-jakkal\/","@type":"Person","@name":"Vasu Jakkal"}],"headline":"Cyber Signals: 3 strategies for protection against ransomware","datePublished":"2022-08-30T15:00:00+00:00","dateModified":"2023-05-16T06:00:05+00:00","mainEntityOfPage":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/"},"wordCount":1123,"publisher":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/08\/Picture1-630564a85f000.jpg","inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/","name":"How security professionals can stay ahead of ransomware | Microsoft Security Blog","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/#primaryimage"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/08\/Picture1-630564a85f000.jpg","datePublished":"2022-08-30T15:00:00+00:00","dateModified":"2023-05-16T06:00:05+00:00","description":"Here's how we can get ahead of ransomware attacks together as a cyber defender community, according to new Cyber Signals research.","breadcrumb":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/#primaryimage","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/08\/Picture1-630564a85f000.jpg","contentUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2022\/08\/Picture1-630564a85f000.jpg","width":1200,"height":800,"caption":"A maze with multiple dots of different colors surrounding a large circle."},{"@type":"BreadcrumbList","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/30\/cyber-signals-3-strategies-for-protection-against-ransomware\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/"},{"@type":"ListItem","position":2,"name":"Cyber Signals: 3 strategies for protection against ransomware"}]},{"@type":"WebSite","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/","name":"Microsoft Security Blog","description":"Expert coverage of cybersecurity topics","publisher":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization","name":"Microsoft Security Blog","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png","contentUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png","width":512,"height":512,"caption":"Microsoft Security Blog"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/"}}]}},"msxcm_display_generated_audio":false,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Microsoft Security Blog","distributor_original_site_url":"https:\/\/www.microsoft.com\/en-us\/security\/blog","push-errors":false,"_links":{"self":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts\/120614","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/users\/162"}],"replies":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/comments?post=120614"}],"version-history":[{"count":0,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts\/120614\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/media\/120620"}],"wp:attachment":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/media?parent=120614"}],"wp:term":[{"taxonomy":"content-type","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/content-type?post=120614"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/topic?post=120614"},{"taxonomy":"products","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/products?post=120614"},{"taxonomy":"threat-intelligence","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/threat-intelligence?post=120614"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/tags?post=120614"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/coauthors?post=120614"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}