iTWire guest writer says layered defences limit ransomware for Calgary firms
An iTWire guest opinion says Calgary businesses can reduce ransomware risk with MFA and tested offline backups; no incident is reported.
- Published
- Exploitation
- No, the source is an opinion piece and reports no incident, vulnerability or exploitation
What happened
According to a guest writer in an iTWire opinion piece, ransomware is best countered by layered habits rather than a single product. The piece is guidance, not incident reporting. iTWire does not name any victim, attacker, vulnerability or CVE. The opening Monday-morning scenario is an illustration by the author, not a reported event. No specific Calgary attack is confirmed in the source.
The author says attacks usually begin with ordinary weaknesses: reused or stolen passwords, phishing emails with attachments, and unpatched remote access tools. The article also says the Canadian Centre for Cyber Security points out that routine security habits would prevent the large majority of ransomware cases in Canada. That is the article’s statement, and this advisory has not checked it against the Centre’s own publication.
Am I affected?
Nothing in the source says a particular product or organisation is affected, so there is no version to check. The author’s point is that any business with weak password hygiene, delayed updates or exposed remote access could be at risk. Details the source does not give, and which are not confirmed here:
- Any statistics on Calgary attacks (the article refers to them but gives no figures).
- Any named threat actor, malware family or entry point.
- Any independent verification of the claims. The article is a single guest opinion piece, and it mentions one local IT provider by name in passing.
What to do now
The steps below are the ones the iTWire guest writer recommends.
- Enable multi-factor authentication on every account, especially email and remote access. The author says this closes the stolen-password route almost entirely.
- Keep three copies of your data on two types of storage, with one copy kept completely separate from your network. Restore a random folder each quarter to check that it works.
- Apply updates on servers, workstations, phones and network gear. Shut off remote access you do not use.
- Use email filtering, and let staff question odd requests. Give accounts only the access their job needs (least privilege).
- Write down a response plan. The author’s first-hour sequence is: disconnect affected machines from the network instead of powering them off, call your IT provider and then your insurer, protect backups, and record screenshots and timestamps.
- The author says law enforcement and federal guidance advise against paying a ransom, and recommends reporting incidents to the Canadian Anti-Fraud Centre and local police.