According to Crowdstrike’s recently released 2019 Global Security Attitude Survey, the total number of organizations around the world that pay the ransom after falling victim to a ransomware attack more than doubled this year, from 14 to 39 percent of those affected. Cybersecurity experts and law enforcement agencies, including the FBI, recommend that victims don’t pay the ransoms as doing so funds the criminals and encourages future activity. Indeed, because victims are still paying the ransoms – which now regularly amount to six-figure sums – cyber criminals will continue to conduct ransomware campaigns and likely extend them further. Despite the success of ransomware, there are some relatively simple means of preventing these attacks or at least of mitigating their effects. Some of these means include ensuring that default passwords aren't used on the network and, where possible, applying two-factor authentication, thereby preventing any hackers who breach the network from moving around and causing more damage. In the event a ransomware attack is successful, organizations can ensure they don't need to pay the ransom by regularly creating a backup of their network and ensuring that backup is stored offline. Many of the recommendations in WaterISAC’s 15 Cybersecurity Fundamentals for Water and Wastewater Utilities can also help prevent and mitigate the effects of ransomware attacks. Read the article at ZDNet.