SMEs who base their systems around Apple software and hardware are more likely to be taken down in ransomware attacks according to a new study.
Datto Businesses third annual Global State of the Channel Ransomware Report said that there was a fivefold increase in the number of MSPs reporting ransomware attacks on macOS and iOS platforms over the last year.
Michael Drake, CEO, masterIT, an MSP in Memphis, Tennessee who has helped clients recover from ransomware attacks.
“The number one threat for small business CEOs is thinking they are immune to ransomware attacks. They think they don’t have anything the hackers want, so it’s not worth the price to protect themselves. When something happens, they’re shocked by the cost to get everything back up and running. It’s mind-blowing.”
The study found that revenue lost to downtime can cripple a small business: The average attack is 10 times more costly to the business than the ransom itself, with attacks costing a business $46,800 on average and the ransom requested averaging $4,300 per attack.
Attacks are frequent and expected to increase: More than 55 percent of MSPs stated their clients experienced a ransomware attack in the first six months of 2018, and 35 percent said their clients were attacked multiple times in the same day. Ninety-two percent of MSPs predict the number of attacks will continue at current or increased rates.
Antivirus software solutions are ineffective: 85 per cent of MSPs reported that ransomware victims had antivirus software installed, 65 percent reported victims had email/spam filters installed, and 29 percent reported victims had had pop-up blockers, which failed to block ransomware attacks.
While the report findings alone are alarming, most businesses don’t report attacks. The survey found that less than one in four ransomware attacks are reported to the authorities.
Jeff Howard, Founder and Owner, Networking Results, a Dallas and Fort Worth IT services and solutions provider said: “In the past five months alone, we’ve been contacted by companies we don’t currently work with for immediate support involving ransomware attacks,” said “Not only have ransomware attacks increased in recent years, but the problem may even be bigger than we know, as many attacks go unreported. While we encourage every victim to notify all relevant parties — including their attorneys, insurance providers, FBI, etc. — not all are quick to follow that counsel.”
When it comes to protecting small and medium-sized businesses, the report also found:
Business continuity and disaster recovery (BCDR) technology is deemed the single most effective method for ransomware protection: 90 percent of MSPs report clients fully recovered from an attack within 24 hours. In addition to BCDR technology, SMBs should work with their MSP to create a ransomware response plan that includes detection, communication, cause assessment, recovery, and prevention.
Employees need training and education to be the front line of defence: Many ransomware breaches are successful due to phishing attacks, malicious websites, web ads, and clickbait directed at small businesses. Ongoing training for employees to help them remain vigilant is a best practice for small businesses.
