Seek urgent assistance from our security operations center! Implement the recommended actions without delay while we address the situation.
Here are the recommended immediate next actions:
Identify the affected systems and promptly isolate them. Disconnect the network at the switch level or physically remove the systems from both wired and wireless networks.
Immediately offline the backups to safeguard them. Conduct scans using antivirus and malware tools to verify their integrity and ensure they are not compromised.
Initiate an immediate password reset for impacted user accounts, setting new passwords with a minimum length of 14 characters. This applies to both regular user accounts and those of senior management.