Protect yourself from ransomware and other threats:
- Don't open unexpected email attachments. Check with the sender first.
- Check links in email before clicking by hovering over them with your mouse. Learn what to look for at Don't Fall for Phish!
- Make backups of your data, and keep them separate from your device. See Desktop Backup or for details about backing up your desktop or MIBackup for information about server backups.
- Install and use endpoint protection software to protect against threats including ransomware and other malware, such as viruses.
- Apply updates and fixes as soon as possible, before malicious actors take advantage of known vulnerabilities to cause harm.
- See Secure Your Devices for advice on protecting your personal devices and data from ransomware and other threats.
If you use your personal devices for U-M work:
- Review Sensitive U-M Data on Personal Devices for your responsibilities and limits on use of personal devices for U-M work.
- Michigan Medicine, enroll mobile devices in the mobile device management system in order to connect to Michigan Medicine resources from them.
If You Get Ransomware
If you get hit with ransomware, don't pay the ransom. There are no guarantees when you are dealing with criminals. Prevention and having good, current backups are the best way to recover from ransomware attacks.
WHAT ACTIONS TO TAKE
Report ransomware as an IT Security Incident for devices used to access, store, or manage U-M data.
If you suspect or know that ransomware has infected a computer, take the following actions immediately:
- Contain the incident by:
- Disconnecting remote and network access.
- Keeping the machine out of use.
- And Do Not:
- Run anti-virus software
- Power down the machine
- Attempt any kind of unilateral mitigation procedure
Spread the Word, Stop Ransomware
Use these resources from the Safe Computing Media Archive to warn others about ransomware:
Ransomware Information & Resources
- StopRansomware.gov. The U.S. Government's official one-stop location for resources to tackle ransomware more effectively.
- No More Ransom (nomoreransom.org). Provides a Q & A and prevention advice. If a device is used to store or manage U-M data, always report it immediately.