Atlanta Ransomware Filtering and Removal Solutions

Ransomware has been weaponized by cyber extortionists and rogue states, posing a possibly existential threat to businesses that are breached. Modern versions of crypto-ransomware target everything, including backup, making even selective restoration a challenging and expensive exercise. New versions of ransomware such as Ryuk, Maze, Sodinokibi, Netwalker, Phobos, Snatch and Nephilim have emerged, replacing Locky, TeslaCrypt, and CryptoWall in prominence, elaborateness, and destructiveness.

Most ransomware breaches are the result of innocuous-seeming emails that include malicious hyperlinks or attachments, and a high percentage are so-called "zero-day" attacks that elude the defenses of traditional signature-matching antivirus filters. Although user education and frontline detection are important to defend against ransomware, leading practices dictate that you expect that some attacks will eventually get through and that you implement a strong backup solution that permits you to recover quickly with minimal losses.

Progent's ProSight Ransomware Vulnerability Report is an ultra-affordable service built around a remote discussion with a Progent security consultant skilled in ransomware defense and recovery. During this assessment Progent will cooperate directly with your Atlanta network managers to collect critical information concerning your security configuration and backup environment. Progent will use this information to generate a Basic Security and Best Practices Report documenting how to adhere to leading practices for implementing and administering your security and backup systems to block or clean up after a ransomware attack.

Progent's Basic Security and Best Practices Report focuses on vital issues related to crypto-ransomware defense and restoration recovery. The review covers:

Cybersecurity

• Correct allocation and use of admin accounts
• Correct NTFS (New Technology File System) and SMB (Server Message Block) authorizations
• Optimal firewall settings
• Secure Remote Desktop Protocol (RDP) configuration
• Guidance for AntiVirus filtering selection and deployment

• Split permission architecture for backup protection
• Protecting critical servers including AD
• Geographically dispersed backups with cloud backup to Microsoft Azure

About Ransomware
Ransomware is a variety of malicious software that encrypts or deletes a victim's files so they are unusable or are made publicly available. Ransomware often locks the victim's computer. To prevent the damage, the victim is required to pay a specified amount of money (the ransom), usually in the form of a crypto currency such as Bitcoin, within a short time window. It is never certain that paying the extortion price will restore the lost data or prevent its exposure to the public. Files can be encrypted or deleted across a network depending on the victim's write permissions, and you cannot reverse engineer the military-grade encryption algorithms used on the compromised files. A typical ransomware attack vector is tainted email, whereby the user is lured into interacting with by means of a social engineering exploit called spear phishing. This causes the email to appear to come from a familiar source. Another common vulnerability is an improperly secured Remote Desktop Protocol port.

CryptoLocker opened the new age of ransomware in 2013, and the damage attributed to by different versions of ransomware is estimated at billions of dollars annually, roughly doubling every two years. Notorious examples include Locky, and NotPetya. Current high-profile variants like Ryuk, Sodinokibi and Spora are more complex and have wreaked more damage than earlier versions. Even if your backup/recovery processes allow your business to restore your ransomed files, you can still be threatened by so-called exfiltration, where stolen documents are exposed to the public (known as "doxxing"). Because new variants of ransomware crop up every day, there is no guarantee that conventional signature-matching anti-virus filters will detect the latest malware. If an attack does show up in an email, it is critical that your end users have learned to identify phishing tricks. Your last line of protection is a solid scheme for performing and retaining offsite backups and the deployment of reliable recovery tools.

Ask Progent About the ProSight Ransomware Susceptibility Consultation in Atlanta
For pricing details and to learn more about how Progent's ProSight Crypto-Ransomware Vulnerability Testing can enhance your defense against crypto-ransomware in Atlanta, call Progent at 800-462-8800 or see Contact Progent.