The "Your Computer Has Been Locked" fake alert is a scam that pretends to be from Microsoft, Apple, or any other company to trick you into thinking that your computer has crashed or a virus has been detected. It does this to try and scare you into calling one of the listed numbers to receive support. If you call these phone numbers, scammers will ask you to install a program that gives them remote access to your computer. Using remote access, these experienced scammers will try to gain your trust and trick you into paying for "support" services or even steal credit card account information.

The "Your Computer Has Been Locked" tech support scam will lock your browser by putting it in full-screen mode and displaying popup messages that won't go away.

The above alert is not real, and its purpose is to scare you into allowing the scammer remote access to your computer. If your browser has been redirected to the "Your Computer Has Been Locked" tech support scam, we recommend closing the page and NEVER calling the listed phone number.

For Windows:

For Mac:
​

1. On your keyboard, press the Command + Option + Escape keys simultaneously. This will open the "Force Quit" application window.
2. In the "Force Quit" box, click on Safari, Chrome, Firefox, or any other browser in which you are seeing the tech support scam page.
3. Click the button that says "Force Quit ". This will forcefully end your browser, thus closing this tech support scam page. If you cannot switch from the unresponsive app, press Command + Option + Shift + Esc for three seconds to force it to quit. This key combination tells macOS to force quit the front-most app. Alternatively, if you are using Safari or any other browser, you can disconnect your Internet, open the web browser, navigate from the malicious web page, and reconnect to the Internet.

Your browser window should now be closed. The next time you open your browser, do not allow the browser to open the last opened page and we recommend to delete your browser's history.

​Ransomware is no longer merely a threat; it has evolved into a pervasive plague, holding businesses captive and demanding exorbitant sums to release their vital data. As an MSP, you occupy a frontline position, safeguarding your clients from this digital scourge. This comprehensive guide outlines a strategic approach to preventing ransomware attacks, drawing upon industry best practices, compelling statistics, expert insights, and advanced capabilities.

Ransomware: How Cybercriminals Hold Data Hostage
Ransomware is malicious software that encrypts a victim's data, rendering it inaccessible. Cybercriminals then demand a ransom payment to provide the decryption key. This digital hostage situation can cripple individuals and businesses, causing significant financial and reputational damage.

MSPs: The Gateway to Ransomware
Managed Service Providers often serve as entry points for ransomware attacks due to their management of IT services for multiple clients. A compromised MSP can provide attackers with simultaneous access to numerous client networks, amplifying the impact of their attacks. This makes MSPs a critical target for cybersecurity efforts, as securing their environments is essential to preventing widespread ransomware incidents.

The Economic Impact of Ransomware
In addition to ransom payments, Managed Service Providers incur several significant costs during ransomware attacks, which can profoundly impact their operations and finances.

Here are some of the essentialists associated with ransomware incidents:

Downtime Costs
One of the most substantial costs for MSPs during a ransomware attack is the downtime experienced by their clients. According to recent research, the average cost of downtime has inched as high as $9,000 per minute for large organizations. For higher-risk enterprises like finance and healthcare, downtime can eclipse $5 million an hour precisely, not including any potential fines or penalties.

Recovery Costs
The recovery process from a ransomware attack can be extremely costly. According to IBM Cost of a Data Breach Report 2024, the global average data breach cost in 2024 is USD 4.88M—a 10% increase over last year and the highest total ever. This includes expenses related to restoring data, repairing systems, and implementing enhanced security measures to prevent future attacks.

Legal and Compliance Costs
MSPs may face legal liabilities and compliance costs following a ransomware incident. If sensitive client data is compromised, MSPs could incur legal fees, regulatory fines, and costs associated with notifying affected parties. These expenses can escalate quickly, especially if the attack involves lawsuits or regulatory scrutiny.

Reputational Damage
The reputational impact of a ransomware attack can lead to lost business opportunities and a decline in client trust. After a significant breach, MSPs may need help acquiring new clients or retaining existing ones, which can have long-term financial implications.

Increased Cybersecurity Insurance Premiums
Following a ransomware attack, MSPs may see their cybersecurity insurance premiums increase. Insurers often adjust rates based on the insured's risk profile, and a history of ransomware incidents can lead to higher costs for coverage in the future.

Investment in Enhanced Security Measures
Post-attack, MSPs typically need to invest in more robust security measures to safeguard against future threats. This includes upgrading software, implementing advanced threat detection systems, and providing additional staff training, which can be costly.

These cumulative costs highlight the extensive financial burden ransomware attacks can impose on MSPs, far exceeding the initial ransom demands.

Prevention is Key – Best Practices for Ransomware Prevention

Access Controls:

• Implement strong access controls, including role-based access and multi-factor authentication (MFA).MSPs must understand how cyber criminals bypass MFA and what they can do to stop them.
  
• Limit administrative privileges to essential personnel.
  

Regular Software Updates:

• Enforce automatic operating systems, applications, and security software updates across all endpoints.
  
• Prioritize patching known vulnerabilities quickly to prevent exploitation.

Strong Password Policies:

• Implement and enforce complex password requirements, including a mix of characters, numbers, and symbols.
  
• Encourage the use of unique passwords for different accounts.
  
• Consider password managers to help users create and manage strong passwords securely.

Employee Education and Awareness:

• Conduct regular cybersecurity training to educate employees about ransomware tactics, such as phishing and social engineering.
  
• Teach employees to identify suspicious emails, attachments, and links.
  
• Make sure to emphasize the importance of reporting any suspicious activity immediately.

Backup and Recovery Strategy:

• Implement a comprehensive backup strategy with regular testing and verification
  
• Store backups offline or in an isolated environment to prevent ransomware encryption.
  
• Develop a detailed recovery plan to minimize downtime in case of an attack.

Network Segmentation:

• Isolate critical systems and data to limit the spread of ransomware in case of a breach.
  
• Implement network segmentation to create separate zones for different functions.

Endpoint Protection:

• Deploy robust endpoint protection solutions with advanced threat detection and prevention capabilities.
  
• Ensure real-time protection against malware, ransomware, and other threats.

Email Security:

• Utilise email security solutions with advanced spam filtering and anti-phishing features.
  
• Train employees to be cautious of suspicious emails and attachments.

Incident Response Plan:

• Develop a comprehensive incident response plan outlining steps to take in case of a ransomware attack.
  
• Conduct regular tabletop exercises to test the plan's effectiveness.

At minimum, you should have copies of mission-critical data in different locations.

Western Digital experienced a hack of its systems, prompting the company to pull its services offline—including its My Cloud backup and file access service. First disclosed on April 3, the outage began on April 2, as reported on the WD My Cloud status page.
If you’ve been hit by this service disruption, you’re likely riding it out in one of two ways: frustratingly cut off from your files, or temporarily inconvenienced because your data isn’t readily available in the cloud. The difference? In the first scenario, My Cloud’s your only location for your data. In the second, you were following the rule of three.

Your data needs backups—and when you make them, more than one copy should exist. Enter the rule of three: Your data isn’t safe unless there are three copies. Disaster can hit at unexpected and inopportune times, a local out of your hands disaster (e.g., fire, flood, theft, cloud service outage) or man-made (hard drive death, drop, accidental data deletion, data corruption).