Ransomware mitigation system and method for mitigating a ransomware attack

A method of mitigating damage done to one or more computing devices on a network connection from a ransomware attack, the method being carried out on an electronic device and comprising the steps of:

• Monitoring, by a monitoring portion, a plurality of digital files on a network of at least one or more computing devices for the rate of modifications carried out on the plurality of digital files in order to determine whether the monitored rate of modifications meets a predetermined activity threshold;
• and
• maintaining bidirectional synchronous communication between the monitoring portion and at least one shut down switch on a dedicated communications line on a network independent of the network traffic on the network that the at least one or more computing devices are connected to by sending confirmation signals between the monitoring portion and the shutdown switch;
• and
• in the event of the shutdown switch not receiving an expected confirmation signal as part of the bidirectional synchronous communication between the at least one or more shutdown switches and the monitoring portion, actuating by the shutdown switch of one or more selected from:
• a forced shutdown of the one or more computing devices;
• and
• a forced disconnection of the network connection of the one or more computing devices.

A tamper prevention system for preventing the likelihood of tampering with a ransomware mitigation system by ransomware, the tamper prevention system comprising:

• a monitoring portion configured for monitoring activities relating to one or more files on at least one or more computing devices;
• a switching device configured for shutting down, in a shutdown event, one or more selected from:
• power to the at least one or more computing devices, and
• network communications with the at least one or more computing devices;
• and
• wherein the switching device and the monitoring portion are configured for bidirectional synchronous communication with each other on a network independent of the network traffic on the network that the one or more computing devices are connected to, and wherein at least one or more selected from the switching device and the monitoring portion are configured for actuating a shutdown event in the event that synchronous communication between the monitoring portion and the switching device is not synchronized.