This incident was caused by ransomware, which has become one of the most prolific and damaging threats to computer systems for public and private sector organizations alike. Binary Defense recommends following the 3-2-1 backup rule for backup management to ensure at least three copies of backups are maintained on two different storage types with one of them not connected to the network, so that attackers won’t be able to destroy data backups as part of the attack. Patching servers and protecting access to any remote connectivity solution such as VPN with Multi-Factor Authentication is another important step. For those attacks that make it past the outer layers of security controls, it is critical to have skilled security analysts working in a 24/7 Security Operations Center (SOC) staffed internally or using a managed security service, such as Binary Defense’s own Security Operations Task Force.

https://www.zdnet.com/article/brazilian-government-recovers-from-worst-ever-cyberattack/