How to reduce ransomware risk

Ransomware is a type of software designed to encrypt or block access to your personal data until a ransom is paid. Most countries consider this malicious software a national threat, and it can strike any organisation – big or small – so make sure you reduce the risk and prepare by creating an action plan in case it happens.

Criminals often spread ransomware through phishing emails or malicious websites. You might accidentally download or install ransomware when you click a link in these emails or visit an infected website. So be aware when you receive an email or message in the name of ING; it might be spoofing.

We will never:

• Ask you to share your credentials (like login, authorisation, mobile app activation, or PIN codes).
• Send an email, text message, or app message with a link that goes directly to ING’s InsideBusiness login page.
• Install software to help you remotely.

Also, never click on unsolicited web links in emails.

In most cases, criminals want money and will provide a screen or website where you can negotiate with them. But not all criminals will restore access to your data after you have paid the money. Recent cases have shown that ransomware can cause organisations to grind to a halt or even go bankrupt. So, the most effective way to combat ransomware is to avoid it altogether.

To reduce the risk, the first step is to be aware that you are a target. Remain suspicious of anyone asking for banking or account information by phone, email, WhatsApp, or SMS. In addition, you should always follow computer hygiene principles:

• Make (offline) backups regularly of all your data, and keep them for at least 3 to 6 months.
• Keep your computers/devices updated with the latest security patches.
• Regularly (daily) check your computer/device for viruses and malware.
• You should also build a team of experts and a business continuity plan.

You can read more about prevention on Opens in a new tabThe No More Ransom Project.

If your computer becomes infected with ransomware, inform the police. You should also report fraudulent emails and websites to valse-email@ing.nl. We will take the appropriate action. You can read more about response on the Opens in a new tabNo More Ransom Project.

Go to our Banking safely page.