Save open work and back up important files. Use instructions for your exact device and software version. If Windows cannot start, see the startup guide.
Work through these checks
0 of 4 complete01Apply security updates for MFT software immediately
- Apply security updates for MFT software immediately
Check whether the original symptom still occurs.
If it does not helpContinue only if this check applies to your device. Consult its manufacturer if you are unsure.
02Isolate and disable vulnerable application components
- Isolate and disable vulnerable application components
Check whether the original symptom still occurs.
If it does not helpContinue only if this check applies to your device. Consult its manufacturer if you are unsure.
03Monitor network logs for large outgoing data transfers (data exfiltration)
- Monitor network logs for large outgoing data transfers (data exfiltration)
Check whether the original symptom still occurs.
If it does not helpContinue only if this check applies to your device. Consult its manufacturer if you are unsure.
04Deploy web application firewalls (WAF) to filter malicious payloads
- Deploy web application firewalls (WAF) to filter malicious payloads
Check whether the original symptom still occurs.
If it does not helpContinue only if this check applies to your device. Consult its manufacturer if you are unsure.
Possible causes
- Unpatched web applications and managed file transfer systems (MOVEit, Accellion)
- Direct exposure of administrative panels to the public internet
- Weak credential management on file hosting servers
Was this helpful?
Your progress is saved on this device.