Question 1

What should I do immediately if hit by ransomware?

Accepted Answer

Immediately: 1) Do NOT restart affected machines. 2) Disconnect from network - unplug ethernet, disable WiFi. 3) Do NOT pay ransom yet. 4) Preserve logs and screenshots. 5) Call eShield emergency line +971585778145. We begin triage within 2 hours.

Question 2

How long does ransomware recovery take?

Accepted Answer

Recovery depends on attack scope and backup availability. Small-scale attacks with good backups: 2-5 days. Mid-scale attacks with partial backups: 1-3 weeks. Large enterprise attacks with compromised backups: 3-8 weeks. Average recovery for UAE SME clients with adequate backups is 7 days.

Question 3

Are you required to report a ransomware attack in UAE?

Accepted Answer

Yes. UAE Cybersecurity Law and UAE PDPL require notification to UAECERT and affected data subjects within 72 hours if personal data was accessed. DIFC entities must notify the DIFC Commissioner within 72 hours. Failure to notify carries significant penalties.

Question 4

Is ransomware covered by cyber insurance in UAE?

Accepted Answer

Most UAE cyber insurance policies cover ransomware response costs, forensic investigation, business interruption, and ransom payments subject to insurer approval. Contact your insurer immediately upon attack discovery and before authorising any payments.

Question 5

Do you negotiate with ransomware attackers?

Accepted Answer

eShield provides ransomware negotiation advisory as a last resort when decryption and backup recovery options are exhausted. We first identify the ransomware variant, assess backup integrity, and explore all alternatives including free decryptors via NoMoreRansom.org.

eShield Consulting

Services

Compliance

Get Protected