If your business is running on a Windows 10 operating system (OS), you should be careful of Snatch, a new strain of ransomware that can easily bypass its security protocols. Discovered by a research team in Sophos, this malware can slip through Windows 10’s security software by rebooting your computer in Safe Mode and disabling security programs from starting.

Who's behind the Snatch ransomware?
According to the report released by Sophos, the threat actors responsible for the Snatch ransomware call themselves the Snatch Team on dark web message forums. The researchers observed this team posting appeals for affiliate partners on Russian language message forums. The cybercriminal group is looking to purchase network access intelligence so they can launch automated brute force attacks against unsuspecting enterprises.

What does Snatch do?
When this malware infects your computer, it installs a Windows service called SuperBackupMan. The SuperBackupMan is then executed, allowing hackers to use administrator access to run the BCDEDIT tool and force your computer to restart in Safe Mode. After restarting, Snatch then uses the Windows command vssadmin.com to erase all the Volume Shadow Copies on your system. This prevents you from recovering the files locked by this ransomware.

Aside from encrypting your data, Snatch is also capable of installing surveillance software, as well as stealing important business and personal information.

How to protect yourself from Snatch
Sophos offered several tips on how you can protect your business from this dangerous ransomware.

• Monitor your network – Be proactive when it comes to hunting for breaches and potential threats in your network. You can invest in the latest threat-hunting program, or, if you lack the resources to do so, you can employ the services of a reputable managed IT services provider (MSP) to assist you in identifying and stopping any malicious activity in your system.
• Use multifactor authentication (MFA) – In this day and age, having a strong password is not enough to protect you from cybercriminals. Set your network up with MFA to make it harder for hackers to brute force their way into your system.
• Check all your devices – Sophos stated in their report that the initial access points of Snatch attacks were unmonitored and unprotected devices. Your IT staff or MSP should run regular checkups on all your active devices to make sure no vulnerabilities exist.
• Protect remote access protocols – If your organization uses servers with remote access protocols, make sure they're updated with the latest security patches and protected by endpoint protection software solutions. These access points should also be monitored regularly for abnormal activity and login attempts.
• Use a secure internet connection – Do not use your remote desktop interface on an unprotected internet connection. If remote access is needed, you should protect your computers by using a virtual private network (VPN).

The severity of the risk posed by Snatch is something you should not ignore. Building a solid and secure network is not enough to protect your business from ransomware. Hackers are always looking for new ways to gain access to your system, which is why your security software solutions, backups, strategy, and training should adapt and keep up. If you want to learn more about how to step up your network security, contact us today.

The post Windows 10 security can be bypassed by Snatch malware appeared first on Complete Technology Resources, Inc..

Two of the first things you should do if your Windows desktop is running slow is to clean up the hard drive and free up some disk space. One of the best ways to do this is to use the Disk Cleanup tool. It’s a program for conveniently weeding out old files that are no longer needed but are likely hindering your hard disk from performing optimally. Disk Cleanup also has the innovative capability of determining which files can be removed safely from your hard disk.

How to operate the Disk Cleanup tool

Disk Cleanup can easily be accessed through the start menu or by searching Disk Cleanup. Once opened, this tool automatically selects Drive C (though you can switch to other drives) and shows a list of file locations containing files that can be removed. Next to each file location is information about how much space it is taking up in your hard disk.

Each file location has a corresponding checkbox that needs to be selected in order to delete the unnecessary files it contains. Upon clicking a file location, a description of the files it contains will appear at the bottom of the window so that you’ll know exactly the types of files you’ll be removing.

When Disk Cleanup is finished, you’ll need to restart your system to remove unnecessary Windows Update files. Remember, the Disk Cleanup tool only removes those Update files that are no longer needed, hence usually very few are deleted.

The benefits of Disk Cleanup

• Maximizes your drive’s memory – The ultimate benefits of cleaning up your disk are maximized computer storage space, increased speed, and improved functionality. These enable you to use your device to run at peak performance levels.
• Makes your computer more reliable – Some programs that are downloaded through the internet are often infected with viruses that can decrease your computer’s reliability. The Disk Cleanup tool can clean your computer and rid it of unwanted programs as well.
• Saves time and increases efficiency – The traditional way of opening folders to find old files to delete may be enough for some, but not for those who prioritize productivity. Although files can be deleted manually, Disk Cleanup is simply much faster at it.

The Disk Cleanup tool is as handy to launch and operate as any basic program. If you are looking to further improve the speed of your systems, contact us today to learn more about our IT services.

The post Revitalize your slow Windows PC appeared first on Complete Technology Resources, Inc..