The five minutes that stop most ransomware

Most ransomware we see arrives through email and waits. The window between someone clicking and the encryption starting is usually long enough to stop it, if anyone is watching.

Disconnect the machine from the network first. Do not shut it down — a running machine keeps evidence that helps us work out what was reached. Then call us.

Similar Posts