CaTS Blog

Ransomware

Ransomware has been in the news quite a bit lately. Reports about hospitals having to pay a 'ransom' to unlock encrypted files have made the news several times over the past year.

What is Ransomware?

Ransomware is malicious software that is typically delivered via an email phishing scam. For example, an infected file attached to an email can install a program that encrypts documents without the user knowing. These small programs also look for any attached USB and network drives (such as our H, K, and R drives), to encrypt documents and backups on those drives. Once encrypted, the documents are no longer usable without a key to decrypt them. 

Where Does 'Ransom' Come In?

For a price, the 'bad guys' will provide you with the key to decrypt your documents. They usually want payment through a non-traceable method, such as electronic currencies like Bitcoin.

How is CaTS Protecting the University Against Ransomware?

The first line of defense is an email protection system that blocks malicious files from reaching your inbox. This solution blocks the majority of ransomware threats, but is not 100% effective due to many variants that are created on a daily basis.

The second line of defense is the antivirus/antimalware program installed on the local computer. Since many individuals on campus don't use our network storage, this protection becomes very important in keeping documents safe from ransomware. To that end, CaTS is deploying SentinelOne, a next generation antivirus/antimalware program that is not only signature based but also uses machine learning and behavior based analysis to detect malicious software. Additionally, SentinelOne protects locally stored documents by creating a protected backup that can be utilized to restore those documents. 

CaTS will be contacting individual departments to arrange installation of SentinelOne on a department by department basis.

As a last line of defense, documents stored on our network storage (H, K, and R drives) can be restored from backups that are performed every night. These backups are not accessible from your computer, therefore, the ransomware cannot encrypt them.

Questions?

If you've fallen victim to ransomware, shut down your machine and call the CaTS Help Desk immediately. If you have any questions, call us at (937) 775-4827, or email helpdesk@wright.edu. 

Wright State Faculty and Staff,

CaTS is aware that Adobe has modified their process requirements to distribute Adobe Creative Cloud software for work at home purposes. This change caused a significant increase in the cost of buying Adobe Creative Cloud software from the Wright State OnTheHub website.

Since becoming aware of this change, CaTS has been working with the appropriate vendors to once again be able to distribute this product for a minimal yearly charge, instead of the standard $20/month educational discount currently being offered. This new contract agreement will also allow students to purchase the software at a discounted price. Prices for faculty, staff and students will be available through OnTheHub when an agreement has been finalized, and will be offered at a significantly decreased rate. CaTS will also notify campus when new pricing options are available.

We understand the frustration this has caused many of you, and are working quickly to correct this issue. If you have further questions, contact the CaTS Help Desk at (937) 775-4827, or email helpdesk@wright.edu. 

CaTS is currently experiencing intermittent issues with WINGS Express and Banner Admin. The following services may be temporarily affected:

• WINGS Express
• Banner Admin
• Wright1 Card Services
• TouchNet
• Appworx
• Parking Services
• WrightBuy
• Xtender
• uAchieve/DARS
• ODS/Cognos

CaTS is actively working on this issue and will notify campus when these services have been fully restored. 

Due to a migration of our VDI environment to new server clusters, all VDI systems will be unavailable during the following date and time:

Date: Saturday, August 18
Time: 12:30 - 1:30 p.m.

Save any work that you have open and power down your machine prior to the maintenance date and time.

If you have questions regarding this maintenance, contact the CaTS Help Desk at (937) 775-4827, or email helpdesk@wright.edu.