Albany Ransomware Filtering and Restoration Solutions

Ransomware has been weaponized by the major cyber-crime organizations and bad-actor governments, representing a potentially lethal threat to businesses that are victimized. Modern versions of crypto-ransomware target everything, including backup, making even selective recovery a complex and costly process. New strains of crypto-ransomware like Ryuk, Maze, Sodinokibi, Mailto (aka Netwalker), DopplePaymer, Conti and Egregor have emerged, displacing Locky, TeslaCrypt, and CryptoWall in prominence, sophistication, and destructive impact.

90% of crypto-ransomware infections are the result of innocent-looking emails that include dangerous hyperlinks or file attachments, and many are "zero-day" strains that elude the defenses of traditional signature-matching antivirus filters. Although user education and up-front detection are critical to protect against ransomware attacks, leading practices demand that you assume some attacks will inevitably succeed and that you deploy a strong backup solution that permits you to restore files and services quickly with little if any losses.

Progent's ProSight Ransomware Vulnerability Checkup is an ultra-affordable service built around an online discussion with a Progent security expert experienced in ransomware protection and repair. During this assessment Progent will work directly with your Albany IT management staff to collect critical information about your cybersecurity profile and backup environment. Progent will utilize this data to create a Basic Security and Best Practices Report detailing how to apply best practices for implementing and administering your security and backup solution to block or recover from a ransomware assault.

Progent's Basic Security and Best Practices Assessment highlights key areas related to crypto-ransomware prevention and restoration recovery. The report addresses:

Security

• Proper allocation and use of administration accounts
• Assigning NTFS and SMB authorizations
• Proper firewall settings
• Safe RDP configuration
• Guidance for AntiVirus filtering identification and deployment

• Split permission model for backup protection
• Protecting critical servers including AD
• Offsite backups including cloud backup to Azure

About Ransomware
Ransomware is a form of malicious software that encrypts or steals a victim's files so they cannot be used or are made publicly available. Ransomware sometimes locks the target's computer. To prevent the damage, the target is asked to pay a certain amount of money, typically in the form of a crypto currency like Bitcoin, within a brief time window. It is never certain that paying the ransom will recover the damaged files or avoid its exposure to the public. Files can be encrypted or erased across a network depending on the victim's write permissions, and you cannot break the strong encryption technologies used on the hostage files. A typical ransomware attack vector is booby-trapped email, in which the user is tricked into responding to by a social engineering technique called spear phishing. This makes the email message to look as though it came from a familiar source. Another popular vulnerability is an improperly secured Remote Desktop Protocol (RDP) port.

The ransomware variant CryptoLocker ushered in the new age of ransomware in 2013, and the damage caused by the many versions of ransomware is said to be billions of dollars annually, roughly doubling every other year. Notorious attacks include Locky, and NotPetya. Current high-profile threats like Ryuk, DoppelPaymer and CryptoWall are more complex and have wreaked more damage than older strains. Even if your backup procedures allow you to restore your encrypted files, you can still be threatened by exfiltration, where stolen documents are exposed to the public (known as "doxxing"). Because new versions of ransomware crop up daily, there is no certainty that conventional signature-based anti-virus tools will detect a new attack. If an attack does appear in an email, it is critical that your end users have learned to identify phishing tricks. Your last line of defense is a solid process for performing and retaining remote backups and the deployment of reliable recovery tools.

Ask Progent About the ProSight Crypto-Ransomware Susceptibility Testing in Albany
For pricing details and to find out more about how Progent's ProSight Ransomware Preparedness Evaluation can enhance your protection against crypto-ransomware in Albany, call Progent at 800-462-8800 or see Contact Progent.