“Ransomware is seeing unprecedented growth with cyber-gangs competing for criminal market share,” KnowBe4 CEO Stu Sjouwerman said. “This competition spurred furious innovation in strategy and tactics, and we see ransomware taking the lead in criminal business models. It is not going to get easier. The only way around these tactics is to recognize the red flags and inoculate employees with effective security awareness training and simulated phishing tests.”

Locky, which reportedly uniquely hashes each binary, disseminates through phishing emails containing Microsoft Word attachments. Consequently, signature-based detection by a traditional antivirus product is nearly impossible, according to KnowBe4.

The firm offered the following tips to fight Locky:

• Block all emails with .zip extensions and/or macros at the email gateway level.
• If possible, disable vehicles used as attack vectors such as Adobe Flash Player, Java and Silverlight.
• Give all employees effective security awareness training so they can recognize the red flags related to ransomware attacks.
• Conduct a phishing security test on users to find out if they will click on something they should not.

Breaches linked to third-party vendors are also continuing to threaten businesses.

For example, American Express wrote to some card members warning of a data compromise by a third-party provider. In a letter published on the California attorney general's site on March 10, the card firm said it became aware that a third-party service provider engaged by numerous merchants experienced unauthorized access to its system. The breach, which happened in December 2013, saw account numbers, names and other information, such as expiration dates, breached.

“It is important to note that American Express owned or controlled systems were not compromised by this incident, and we are providing this notice to you as a precautionary measure,” the letter read.

Kurt Stammberger, chief marketing officer for the San Mateo, Calif.-based cybersecurity firm Fortscale, said, “Partner failures, like the one American Express just experienced, are one of the fastest-growing types of cybersecurity breaches, and it's a primary focus of our research. Look, the truth is, companies like Amex are really, really good at security, they are basically security Jedi. But when you're operating a modern multinational corporation like American Express, it's almost impossible to make sure that all your thousands of partner organizations and service providers are taking security as seriously as you do. It's a huge problem.”