Atlanta Ransomware Defense and Restoration Services

Ransomware has become the weapon of choice for cyber extortionists and bad-actor governments, posing a potentially lethal risk to companies that fall victim. Current variations of ransomware go after everything, including backup, making even selective restoration a complex and costly exercise. Novel variations of ransomware such as Ryuk, Maze, Sodinokibi, Netwalker, DopplePaymer, Conti and Nephilim have emerged, replacing WannaCry, Spora, and Petya in notoriety, elaborateness, and destructive impact.

90% of crypto-ransomware infections are the result of innocuous-looking emails that include dangerous links or file attachments, and many are so-called "zero-day" attacks that can escape detection by legacy signature-based antivirus tools. Although user training and up-front identification are critical to protect your network against ransomware attacks, best practices dictate that you assume some attacks will eventually get through and that you deploy a solid backup solution that enables you to recover rapidly with little if any losses.

Progent's ProSight Ransomware Preparedness Report is a low-cost service built around a remote discussion with a Progent cybersecurity expert skilled in ransomware defense and repair. In the course of this assessment Progent will collaborate with your Atlanta IT managers to gather pertinent data about your cybersecurity profile and backup processes. Progent will use this information to create a Basic Security and Best Practices Assessment documenting how to follow best practices for implementing and administering your cybersecurity and backup solution to prevent or recover from a crypto-ransomware attack.

Progent's Basic Security and Best Practices Assessment highlights vital areas associated with crypto-ransomware prevention and restoration recovery. The review addresses:

Security

• Effective allocation and use of admin accounts
• Assigning NTFS (New Technology File System) and SMB (Server Message Block) authorizations
• Proper firewall configuration
• Safe RDP configuration
• Recommend AntiVirus (AV) filtering selection and configuration

• Split permission architecture for backup integrity
• Backing up required servers such as AD
• Offsite backups with cloud backup to Microsoft Azure

About Ransomware
Ransomware is a form of malware that encrypts or deletes files so they are unusable or are publicized. Ransomware sometimes locks the victim's computer. To avoid the carnage, the target is asked to send a specified amount of money, typically in the form of a crypto currency such as Bitcoin, within a brief time window. It is never certain that paying the ransom will recover the damaged files or prevent its exposure to the public. Files can be encrypted or deleted throughout a network based on the victim's write permissions, and you cannot solve the strong encryption technologies used on the compromised files. A typical ransomware attack vector is booby-trapped email, in which the target is tricked into interacting with by means of a social engineering technique known as spear phishing. This causes the email message to appear to come from a familiar source. Another common attack vector is an improperly protected Remote Desktop Protocol port.

The ransomware variant CryptoLocker ushered in the new age of crypto-ransomware in 2013, and the monetary losses caused by different versions of ransomware is estimated at billions of dollars annually, roughly doubling every other year. Famous examples include Locky, and NotPetya. Recent high-profile threats like Ryuk, Sodinokibi and CryptoWall are more complex and have caused more havoc than older strains. Even if your backup procedures permit you to recover your encrypted files, you can still be hurt by so-called exfiltration, where ransomed documents are exposed to the public (known as "doxxing"). Because new versions of ransomware are launched every day, there is no certainty that conventional signature-based anti-virus tools will detect a new attack. If threat does appear in an email, it is important that your end users have been taught to identify phishing tricks. Your ultimate defense is a solid scheme for performing and keeping offsite backups plus the deployment of dependable recovery platforms.

Ask Progent About the ProSight Crypto-Ransomware Vulnerability Testing in Atlanta
For pricing information and to learn more about how Progent's ProSight Crypto-Ransomware Susceptibility Audit can bolster your protection against crypto-ransomware in Atlanta, call Progent at 800-462-8800 or see Contact Progent.