Ransomware a rampant force in local companies according to ProComm and Check Point Software Technologies

Cyber security is a very hot topic the world over and has been a cause of concern the world over with companies big and small falling victim to a malicious attack known as RansomWare.

A local Cybersecurity firm, ProComm Group, says Zimbabwean companies have been the victim of RansomWare on numerous occasions.

Some companies have had their executive’s files encrypted by hackers who penetrate their companies’ networks. The hackers then demand payment (ransom), usually in BitCoin in order to release the files. Using BitCoin helps the criminals stay anonymous to an extent.

Procomm managing director, Tawengwa Toronga was speaking today at a Cybersecurity event organised by the company in partnership with CheckPoint one of the top global cybersecurity firms.
At the event, a Check Point security specialist Tau Mailula identified that most local companies are not protected from what are called Zero days attacks. Zero day attacks are attacks from virus and malware that are not yet registered in antivirus databases (new virus and malware).

Check Point and other companies like them have a process called Sand Boxing that protects enterprise networks and smartphones from such attacks.

Since this solution is mainly targeted at companies that communicate heavily via email, the Sand Boxing interception technique employed on this ransomware is performed through emulation. The emulation process goes as follows:

• Incoming email enters Sand Box system and any attached files are converted into pdf format before being forwarded to recipient.
• Original file is then emulated in Sand Box and if the attached original file is infected it is flagged and denied access to the network.
• If the original file is clean it is allowed into the network and made available for the recipient to download.

Other global companies that compete with CheckPoint include Cisco, Palo Alto and Fortinet.

Cyber security has emerged as one of the biggest threats in recent years because of the high internet penetration locally. Executives of large companies are particularly a target because they usually hold sensitive company data on their devices.

The event was attended by financial institutions, medical aid societies and government entities. A Check Point security expert at the event, Mailula said thousands of attacks are made on existing vulnerabilities on systems used by companies, from operating systems to applications.

Unfortunately the event was not attended by most telecommunication companies who enable the connectivity that creates access for cyber security attacks.