Someone in your industry got hit with ransomware. What now?

This Expel blog explains the growing ransomware threat, contrasts opportunistic and targeted ransomware attacks, cites an observed targeted campaign that delivered GOOTKIT which launched Cobalt Strike leading to an attempted REvil ransomware deployment against the financial sector, and provides six practical mitigations (regular tested backups, quarterly IR tabletop testing, disable internet-facing RDP / use VPN+2FA, enable MFA, configure WSH/JScript to open in Notepad, and block Microsoft Office macros).