Aurora Ransomware Filtering and Remediation Solutions

Ransomware has become the weapon of choice for cybercriminals and rogue governments, posing a possibly existential threat to businesses that are breached. Current strains of crypto-ransomware go after everything, including backup, making even selective recovery a long and costly process. New strains of ransomware like Ryuk, Maze, Sodinokibi, Mailto (aka Netwalker), DopplePaymer, Conti and Egregor have made the headlines, replacing Locky, Spora, and CryptoWall in prominence, sophistication, and destructiveness.

Most ransomware breaches come from innocuous-seeming emails with malicious hyperlinks or attachments, and many are "zero-day" variants that can escape detection by legacy signature-based antivirus tools. While user education and up-front identification are critical to protect against ransomware attacks, best practices demand that you assume some malware will eventually get through and that you deploy a solid backup solution that enables you to restore files and services quickly with minimal losses.

Progent's ProSight Ransomware Preparedness Assessment is a low-cost service built around a remote discussion with a Progent cybersecurity expert experienced in ransomware defense and repair. During this assessment Progent will work directly with your Aurora network management staff to collect pertinent information about your security configuration and backup environment. Progent will utilize this data to generate a Basic Security and Best Practices Report documenting how to apply best practices for implementing and managing your cybersecurity and backup solution to block or clean up after a crypto-ransomware assault.

Progent's Basic Security and Best Practices Assessment highlights key areas related to crypto-ransomware defense and restoration recovery. The review covers:

Security

• Correct use of administration accounts
• Assigning NTFS and SMB (Server Message Block) permissions
• Proper firewall configuration
• Secure Remote Desktop Protocol (RDP) connections
• Recommend AntiVirus tools identification and configuration

• Split permission architecture for backup protection
• Protecting required servers such as AD
• Offsite backups with cloud backup to Microsoft Azure

About Ransomware
Ransomware is a type of malicious software that encrypts or steals files so they are unusable or are made publicly available. Crypto-ransomware sometimes locks the target's computer. To prevent the damage, the victim is required to pay a certain amount of money, usually via a crypto currency like Bitcoin, within a brief period of time. There is no guarantee that paying the ransom will recover the damaged files or prevent its publication. Files can be encrypted or erased across a network depending on the target's write permissions, and you cannot reverse engineer the strong encryption technologies used on the hostage files. A typical ransomware delivery package is spoofed email, in which the user is tricked into interacting with by means of a social engineering exploit known as spear phishing. This makes the email to look as though it came from a trusted source. Another common vulnerability is an improperly protected Remote Desktop Protocol (RDP) port.

CryptoLocker ushered in the modern era of crypto-ransomware in 2013, and the monetary losses caused by different strains of ransomware is said to be billions of dollars annually, more than doubling every other year. Famous attacks are WannaCry, and NotPetya. Current high-profile threats like Ryuk, Maze and Cerber are more sophisticated and have wreaked more damage than earlier versions. Even if your backup/recovery procedures enable you to recover your ransomed files, you can still be hurt by exfiltration, where stolen data are made public. Because new variants of ransomware crop up every day, there is no guarantee that conventional signature-matching anti-virus tools will detect a new attack. If threat does show up in an email, it is critical that your end users have learned to be aware of social engineering techniques. Your ultimate protection is a solid process for scheduling and keeping offsite backups and the use of dependable restoration platforms.

Ask Progent About the ProSight Ransomware Vulnerability Review in Aurora
For pricing information and to find out more about how Progent's ProSight Crypto-Ransomware Susceptibility Evaluation can enhance your protection against ransomware in Aurora, call Progent at 800-462-8800 or visit Contact Progent.