New ransomware shuts off Windows protection and wipes backups before locking files
A criminal group is using harmful software called Gentlemen to lock up files on Windows computers while also turning off built-in protections and deleting backup copies that could help with recovery. This makes it much harder for victims to restore their data after an attack.
Who is at risk
Businesses, schools, hospitals, local governments, and anyone using Windows computers with important files or shared networks are most at risk.
What to watch for
Watch for security protection suddenly being turned off, backups failing or disappearing, files becoming inaccessible, or unexpected warnings asking for payment to unlock data.
What to do
Immediately make sure your Windows security protection is on, confirm your backups still exist and are stored separately, and have a trusted IT professional check any affected device right away.