Albany Ransomware Protection and Cleanup Expertise

Ransomware has been widely adopted by the major cyber-crime organizations and rogue governments, representing a possibly lethal threat to companies that are victimized. The latest versions of crypto-ransomware target all vulnerable resources, including online backup, making even partial recovery a long and costly exercise. Novel versions of crypto-ransomware like Ryuk, Maze, Sodinokibi, Netwalker, DopplePaymer, LockBit and Egregor have emerged, replacing WannaCry, Spora, and CryptoWall in prominence, sophistication, and destructiveness.

90% of ransomware infections are the result of innocent-seeming emails with malicious links or file attachments, and a high percentage are "zero-day" attacks that can escape detection by traditional signature-matching antivirus tools. Although user education and up-front detection are important to protect against ransomware attacks, leading practices dictate that you assume some malware will eventually succeed and that you prepare a strong backup solution that allows you to recover quickly with little if any losses.

Progent's ProSight Ransomware Vulnerability Report is an ultra-affordable service centered around an online interview with a Progent security expert experienced in ransomware protection and repair. During this interview Progent will cooperate with your Albany network management staff to collect critical data concerning your security profile and backup environment. Progent will use this data to create a Basic Security and Best Practices Report documenting how to apply leading practices for configuring and managing your cybersecurity and backup systems to prevent or recover from a crypto-ransomware attack.

Progent's Basic Security and Best Practices Report highlights key areas associated with ransomware prevention and restoration recovery. The review covers:

Cybersecurity

• Correct allocation and use of administration accounts
• Assigning NTFS (New Technology File System) and SMB permissions
• Optimal firewall settings
• Safe RDP configuration
• Guidance for AntiVirus (AV) filtering selection and deployment

• Split permission model for backup protection
• Backing up required servers such as AD
• Geographically dispersed backups with cloud backup to Microsoft Azure

About Ransomware
Ransomware is a form of malicious software that encrypts or deletes a victim's files so they are unusable or are made publicly available. Crypto-ransomware often locks the victim's computer. To prevent the carnage, the victim is asked to pay a specified amount of money, typically in the form of a crypto currency like Bitcoin, within a short time window. It is never certain that delivering the ransom will recover the lost files or avoid its publication. Files can be altered or erased throughout a network depending on the victim's write permissions, and you cannot reverse engineer the military-grade encryption technologies used on the hostage files. A typical ransomware delivery package is booby-trapped email, in which the target is lured into responding to by means of a social engineering technique known as spear phishing. This causes the email message to appear to come from a trusted sender. Another popular attack vector is a poorly secured Remote Desktop Protocol port.

CryptoLocker ushered in the new age of crypto-ransomware in 2013, and the monetary losses attributed to by the many strains of ransomware is estimated at billions of dollars annually, roughly doubling every other year. Notorious examples include WannaCry, and Petya. Recent high-profile variants like Ryuk, Maze and CryptoWall are more complex and have wreaked more havoc than older versions. Even if your backup processes enable you to recover your ransomed files, you can still be threatened by so-called exfiltration, where ransomed data are made public. Because additional variants of ransomware are launched daily, there is no certainty that traditional signature-based anti-virus tools will detect the latest malware. If threat does appear in an email, it is critical that your users have learned to identify phishing techniques. Your last line of protection is a sound process for scheduling and retaining remote backups and the deployment of reliable recovery platforms.

Contact Progent About the ProSight Crypto-Ransomware Vulnerability Assessment in Albany
For pricing details and to find out more about how Progent's ProSight Ransomware Vulnerability Consultation can bolster your defense against crypto-ransomware in Albany, call Progent at 800-462-8800 or visit Contact Progent.