CAGAYAN de Oro City Mayor Rolando Uy on Monday issued a cyber alert to the public via his official Facebook page.
Uy shared an advisory from the Department of Information and Communications Technology (DICT), warning about the Medusa Ransomware, a serious cyber threat to both public and private systems.
The Medusa Ransomware is a malicious software that targets publicly accessible Remote Desktop Protocol (RDP) servers.
It penetrates systems by employing brute force attacks, launching phishing campaigns, or capitalizing on existing security vulnerabilities.
Once the ransomware gains network access, it can spread and infect other interconnected machines.
The DICT advisory, released on Sunday, guides individuals and government agencies to bolster their defenses against this cyber threat.
The advisory details several preventative measures that can be utilized to shield systems and devices from ransomware attacks.
One such measure includes regular monitoring of an organization’s attack surface and carrying out an inventory of various systems.
The DICT also advises backing up all files, systems, processes, and other digital assets regularly to prevent data loss in case of an attack.
The advisory also recommends the use of a security information and event management system.
It urges mandatory installation of anti-malware, End-point Detection Response, and Extended Detection and Response software in all government offices.
Network segmentation is another suggested measure, which helps limit the spread of an attack within a network.
The DICT’s advisory strongly discourages the use of pirated software and unlicensed programs.
It also emphasizes the importance of scrutiny of suspicious emails, particularly those originating from unknown addresses.
Additionally, the advisory urges a review of BYOD (bring your device) policies and access management policies, especially for work-from-home arrangements using non-government-issued computers.
Regular updating of all installed programs, implementation of account lockout policies, and a solid recovery plan are also recommended.
Education is a crucial part of this defense strategy. The DICT encourages the training of IT, and cybersecurity personnel in incident response procedures to effectively address cyber incidents.
For technical assistance and support, the National Computer Emergency Response Team of the DICT Cybersecurity Bureau can be reached at cert-ph@dict.gov.ph or 8920-01-01 local 1708 and 2378.
Mayor Uy echoed the DICT’s call, urging everyone to take these measures seriously.
He advised the public to stay safe and secure online, underscoring that cybersecurity is a shared responsibility.
