Forum Discussion
Ransomware Lockbit and Windows Server 2019 DC
Hi. Today I've detected a Lockbit ramsonware attack at 7.00 a.m (out of working hours) on my Windows Server 2010 DC that is actually unusable. The question is: how is it possible that on a DC use...
Do your servers are up to date with the below points.
- Are the security updates on the system are latest
- Antivirus software on the server
There are a lot of reasons due to which the systems are attacked and in my past, I saw the direct attack happened to DC sometimes the virus is already in your environment just the target gets changed and we realize it later on.
Go through the doc and follow the guidelines so that systems will be secure and how you can prevents the future attacks
https://www.microsoft.com/security/blog/2020/04/28/ransomware-groups-continue-to-target-healthcare-critical-services-heres-how-to-reduce-risk/