What has happened
On Tuesday, Oct. 24, 2017 a new strand of ransomware, called Bad Rabbit appeared in Russia and the Ukraine and spread throughout the day. It first was found after attacking Russian media outlets and large organizations in the Ukraine, and has found its way into Western Europe and the United States. The initial installer masquerades as a Flash update, but is believed to be an updated version of NotPetya. According to SonicWall Capture Labs Threat researchers, Bad Rabbit spreads using the SMB protocol within Windows.
Why this is relevant to you
The same Firewall Sandbox technology that GTB offers our customers (i.e. SonicWall) is able to block the Bad Rabbit ransomware malware before attacks are able to hit. If you currently do not have a Firewall security service, we recommend either contacting us today or discussing this with your IT staff immediately.
How the technology works
The Firewall Sandboxing feature analyzes malware samples in the cloud, and by doing so, is able to block malware attacks before they're able to enter your organization. In addition, the Sandboxing service is designed to provide real-time protection against new strains of malware even before signatures are available on firewalls.
Are GTB customers protected?
GTB customers with both the basic Firewall solution (which includes a Gateway Security Subscription) and Firewall with the enhanced Sandbox service are protected from this new Bad Rabbit ransomware malware. The SonicWall Capture Labs have already released signatures to protect your company against it. These signatures are applied automatically, so there is no need to worry about updating your firewall manually. If you currently only have the basic Firewall solution, we recommend that you add-on the Sandbox service, as it was this technology that caught the Bad Rabbit ransomware.
Learn more about GTB's full CyberSeal suite of security services and watch our video on cyber security.
Don't have Firewall yet? Contact us today for a free assessment at firstname.lastname@example.org or by phone at 1 (877) CALL-GTB.
Related: Cyber Security: Traditional vs. Next Generation Firewall, How to Protect Your Company Against Cyber Attacks and Ransomware: What Is It and How to Reduce the Risk for Infection?