Atlanta Ransomware Defense and Remediation Solutions

Ransomware has been weaponized by the major cyber-crime organizations and rogue states, representing a possibly lethal threat to companies that are victimized. The latest versions of crypto-ransomware go after everything, including online backup, making even partial restoration a challenging and expensive exercise. Novel versions of crypto-ransomware such as Ryuk, Maze, Sodinokibi, Mailto (aka Netwalker), DopplePaymer, Snatch and Egregor have emerged, replacing Locky, TeslaCrypt, and Petya in prominence, elaborateness, and destructive impact.

Most crypto-ransomware breaches come from innocent-seeming emails with malicious links or attachments, and a high percentage are so-called "zero-day" attacks that elude detection by traditional signature-matching antivirus (AV) filters. While user training and up-front identification are important to defend your network against ransomware attacks, leading practices dictate that you expect that some attacks will inevitably succeed and that you put in place a strong backup mechanism that allows you to restore files and services rapidly with little if any losses.

Progent's ProSight Ransomware Preparedness Report is an ultra-affordable service centered around an online interview with a Progent security consultant skilled in ransomware defense and repair. In the course of this assessment Progent will cooperate with your Atlanta network management staff to gather pertinent information concerning your security profile and backup processes. Progent will utilize this information to produce a Basic Security and Best Practices Report documenting how to adhere to best practices for configuring and managing your security and backup systems to prevent or clean up after a ransomware attack.

Progent's Basic Security and Best Practices Assessment focuses on vital issues associated with ransomware prevention and restoration recovery. The review addresses:

Security

• Effective allocation and use of administration accounts
• Appropriate NTFS (New Technology File System) and SMB authorizations
• Proper firewall setup
• Safe Remote Desktop Protocol (RDP) configuration
• Advice about AntiVirus filtering selection and configuration

• Split permission architecture for backup integrity
• Backing up critical servers including Active Directory
• Offsite backups with cloud backup to Microsoft Azure

About Ransomware
Ransomware is a type of malicious software that encrypts or steals files so they cannot be used or are made publicly available. Crypto-ransomware often locks the target's computer. To avoid the damage, the victim is asked to send a specified ransom, usually in the form of a crypto currency such as Bitcoin, within a brief time window. It is never certain that delivering the ransom will restore the damaged data or prevent its exposure to the public. Files can be encrypted or erased across a network depending on the victim's write permissions, and you cannot solve the military-grade encryption technologies used on the compromised files. A typical ransomware attack vector is tainted email, whereby the user is tricked into interacting with by means of a social engineering technique called spear phishing. This causes the email message to appear to come from a familiar source. Another common attack vector is a poorly secured RDP port.

The ransomware variant CryptoLocker ushered in the new age of crypto-ransomware in 2013, and the damage caused by different versions of ransomware is estimated at billions of dollars annually, more than doubling every two years. Notorious examples include WannaCry, and NotPetya. Current high-profile variants like Ryuk, DoppelPaymer and Spora are more complex and have caused more havoc than earlier versions. Even if your backup processes enable you to recover your encrypted files, you can still be threatened by so-called exfiltration, where ransomed data are made public. Because additional variants of ransomware are launched every day, there is no certainty that traditional signature-matching anti-virus filters will block the latest attack. If threat does appear in an email, it is critical that your end users have learned to identify phishing tricks. Your ultimate defense is a solid process for performing and keeping offsite backups and the use of dependable restoration tools.

Ask Progent About the ProSight Ransomware Vulnerability Evaluation in Atlanta
For pricing information and to learn more about how Progent's ProSight Crypto-Ransomware Readiness Checkup can enhance your defense against ransomware in Atlanta, call Progent at 800-462-8800 or visit Contact Progent.