Addison Ransomware Filtering and Restoration Expertise

Ransomware has been widely adopted by cybercriminals and rogue states, representing a possibly lethal risk to businesses that are successfully attacked. Modern strains of ransomware go after all vulnerable resources, including online backup, making even partial recovery a long and costly exercise. New variations of ransomware such as Ryuk, Maze, Sodinokibi, Mailto (aka Netwalker), DopplePaymer, Snatch and Egregor have emerged, replacing Locky, TeslaCrypt, and Petya in prominence, elaborateness, and destructiveness.

Most ransomware penetrations are the result of innocuous-seeming emails that include malicious hyperlinks or file attachments, and many are so-called "zero-day" variants that elude detection by traditional signature-matching antivirus tools. While user training and frontline identification are important to protect your network against ransomware, best practices demand that you expect that some malware will inevitably get through and that you put in place a strong backup mechanism that permits you to repair the damage quickly with minimal damage.

Progent's ProSight Ransomware Preparedness Report is an ultra-affordable service centered around a remote discussion with a Progent cybersecurity expert experienced in ransomware protection and recovery. In the course of this assessment Progent will cooperate directly with your Addison network managers to gather pertinent information concerning your cybersecurity posture and backup processes. Progent will utilize this data to create a Basic Security and Best Practices Report documenting how to adhere to best practices for implementing and administering your cybersecurity and backup solution to prevent or recover from a crypto-ransomware assault.

Progent's Basic Security and Best Practices Report highlights key areas related to ransomware defense and restoration recovery. The review addresses:

Cybersecurity

• Proper use of administration accounts
• Correct NTFS and SMB authorizations
• Proper firewall setup
• Safe Remote Desktop Protocol connections
• Recommend AntiVirus filtering identification and deployment

• Split permission model for backup integrity
• Backing up key servers including AD
• Offsite backups including cloud backup to Azure

About Ransomware
Ransomware is a variety of malicious software that encrypts or steals files so they cannot be used or are made publicly available. Crypto-ransomware often locks the target's computer. To prevent the damage, the victim is asked to pay a specified ransom, typically via a crypto currency such as Bitcoin, within a brief time window. There is no guarantee that delivering the extortion price will recover the damaged data or prevent its publication. Files can be altered or deleted throughout a network based on the target's write permissions, and you cannot solve the military-grade encryption technologies used on the compromised files. A common ransomware delivery package is booby-trapped email, whereby the victim is lured into responding to by means of a social engineering exploit known as spear phishing. This causes the email to look as though it came from a familiar source. Another popular attack vector is a poorly secured RDP port.

CryptoLocker ushered in the new age of ransomware in 2013, and the monetary losses attributed to by the many versions of ransomware is estimated at billions of dollars per year, roughly doubling every two years. Famous examples include Locky, and Petya. Recent high-profile threats like Ryuk, DoppelPaymer and Spora are more elaborate and have wreaked more havoc than older versions. Even if your backup/recovery processes enable your business to restore your ransomed files, you can still be threatened by so-called exfiltration, where stolen documents are exposed to the public. Because new versions of ransomware crop up daily, there is no certainty that traditional signature-based anti-virus tools will block a new malware. If threat does appear in an email, it is important that your users have been taught to identify phishing techniques. Your ultimate protection is a solid scheme for performing and keeping offsite backups plus the use of dependable recovery tools.

Contact Progent About the ProSight Ransomware Vulnerability Consultation in Addison
For pricing information and to learn more about how Progent's ProSight Ransomware Preparedness Review can enhance your protection against crypto-ransomware in Addison, phone Progent at 800-462-8800 or visit Contact Progent.