Ransomware prevention is the practice of stopping encryption-extortion attacks before they spread. It rests on tested offline backups, prompt patching, multi-factor authentication and least-privilege accounts. Network segmentation matters too, because cameras and recorders are commonly left unpatched and remotely reachable.
Cameras are not usually the target, but they are often the way in. A recorder on a flat network is a useful foothold.
The common routes in
Phishing, exposed remote access and unpatched devices cover most incidents. Default passwords on recorders and camera web interfaces widen the door, so change them and restrict who can reach those pages.
What limits the damage
Segregate cameras and recorders from business systems, keep backups offline and test a restore. Paying a demand funds the next attack and does not guarantee that the data comes back.
Related:Glossary: Remote access securityCommercial security systems
