Ransomware-wielding attackers are increasingly doing much more than just crypto-locking systems with malware and demanding a payoff in return for the promise of a decryption tool. Security experts say organizations that discover a ransomware outbreak treat it as an isolated event tied to just a few endpoints. Assume that the attackers are still inside the network until proven otherwise and execute a prepared incident response plan to mitigate further damage. Identify attackers’ ongoing capabilities and ensure those weaknesses cannot be exploited again, experts say.”]
Source: https://www.inforisktoday.com/8-tips-for-crafting-ransomware-defenses-responses-a-14724