Allen Ransomware Protection and Restoration Services

Ransomware has become the weapon of choice for cybercriminals and rogue states, posing a potentially lethal threat to companies that are breached. Modern strains of crypto-ransomware go after everything, including backup, making even selective restoration a challenging and costly process. Novel versions of ransomware such as Ryuk, Maze, Sodinokibi, Netwalker, DopplePaymer, Conti and Nephilim have made the headlines, replacing WannaCry, TeslaCrypt, and CryptoWall in prominence, sophistication, and destructive impact.

90% of crypto-ransomware breaches come from innocuous-seeming emails with dangerous hyperlinks or file attachments, and many are "zero-day" strains that can escape the defenses of traditional signature-based antivirus (AV) tools. Although user training and up-front detection are important to protect your network against ransomware, best practices demand that you take for granted some malware will eventually get through and that you prepare a strong backup solution that allows you to restore files and services quickly with little if any losses.

Progent's ProSight Ransomware Preparedness Checkup is an ultra-affordable service built around a remote discussion with a Progent security expert skilled in ransomware defense and recovery. During this assessment Progent will cooperate with your Allen IT managers to collect critical information concerning your security profile and backup environment. Progent will utilize this information to produce a Basic Security and Best Practices Assessment documenting how to adhere to leading practices for configuring and managing your security and backup systems to block or recover from a ransomware assault.

Progent's Basic Security and Best Practices Assessment highlights vital areas related to ransomware defense and restoration recovery. The review addresses:

Security

• Effective allocation and use of admin accounts
• Appropriate NTFS (New Technology File System) and SMB permissions
• Proper firewall settings
• Secure RDP access
• Guidance for AntiVirus tools selection and deployment

• Split permission architecture for backup protection
• Protecting critical servers including AD
• Offsite backups including cloud backup to Azure

About Ransomware
Ransomware is a form of malicious software that encrypts or deletes a victim's files so they are unusable or are publicized. Crypto-ransomware often locks the victim's computer. To prevent the carnage, the victim is required to send a certain amount of money (the ransom), usually via a crypto currency like Bitcoin, within a brief time window. It is not guaranteed that paying the extortion price will restore the damaged files or prevent its publication. Files can be encrypted or deleted across a network depending on the target's write permissions, and you cannot break the military-grade encryption technologies used on the compromised files. A common ransomware delivery package is tainted email, whereby the target is tricked into interacting with by means of a social engineering technique called spear phishing. This causes the email message to look as though it came from a familiar source. Another popular attack vector is an improperly secured Remote Desktop Protocol (RDP) port.

The ransomware variant CryptoLocker opened the modern era of crypto-ransomware in 2013, and the monetary losses caused by the many versions of ransomware is said to be billions of dollars per year, more than doubling every other year. Famous examples include Locky, and Petya. Current headline threats like Ryuk, DoppelPaymer and TeslaCrypt are more complex and have wreaked more havoc than older versions. Even if your backup/recovery procedures enable you to restore your encrypted data, you can still be hurt by exfiltration, where ransomed documents are exposed to the public. Because new variants of ransomware crop up daily, there is no certainty that traditional signature-matching anti-virus filters will detect a new attack. If threat does show up in an email, it is important that your end users have been taught to identify social engineering techniques. Your last line of defense is a sound scheme for scheduling and retaining offsite backups plus the use of dependable recovery tools.

Ask Progent About the ProSight Ransomware Vulnerability Checkup in Allen
For pricing details and to learn more about how Progent's ProSight Ransomware Readiness Assessment can enhance your defense against ransomware in Allen, call Progent at 800-462-8800 or visit Contact Progent.