How to reduce ransomware risk

To overview

Ransomware is a type of software designed to encrypt or block access to your personal data until a ransom is paid. Most countries consider this malicious software a national threat. And it can strike any organisation – big or small - so make sure you reduce the risk and prepare by creating an action plan in case it happens.

How ransomware spreads

Criminals often spread ransomware through phishing emails or malicious websites. You might accidentally download or install ransomware when you click a link in these emails or visit an infected website. So be aware when you receive an email or message in the name of ING, it might be spoofing. We will never:

Ask you to share your credentials (like login, authorisation, mobile app activation, or PIN codes).
Send an email, text message, or app with a link that goes directly to ING’s InsideBusiness login page.
Install software to help you remotely.

Also, never click on unsolicited web links in emails.

What to do after a ransomware attack

In most cases, criminals want money and will provide a screen or website where you can negotiate with them. But not all criminals will regrant you access to your data after you have paid the money. Recent cases have shown that ransomware can cause organisations to grind to a halt or even go bankrupt. So, the most effective way to combat ransomware is to avoid it altogether.

Reduce risk and impact

To reduce the risk, the first step is to be aware that you are a target. Remain suspicious of anyone asking for banking or account information by phone, email, WhatsApp or SMS. In addition, you should always follow computer hygiene principles:

Make (offline) backups regularly of all our data, and keep them for at least 3 to 6 months
Keep your computers/devices updated with the latest security patches
Regularly (daily) check your computer/device for viruses and malware

You should also build a team of experts and a business continuity plan. You can read more about prevention on The No More Ransom Project.

Is your computer infected with ransomware?

In case your computer gets infected with ransomware, inform the police. You should also report fraudulent emails and websites to valse-email@ing.nl. We will take the appropriate action. You can read more about response on The No More Ransom Project.

Learn more about fraud prevention