Belo Horizonte Ransomware Filtering and Cleanup Consulting

Ransomware has been weaponized by the major cyber-crime organizations and malicious states, posing a potentially lethal risk to businesses that are breached. Current strains of ransomware go after all vulnerable resources, including backup, making even selective recovery a complex and expensive exercise. New strains of ransomware such as Ryuk, Maze, Sodinokibi, Mailto (aka Netwalker), DopplePaymer, LockBit and Nephilim have emerged, replacing WannaCry, Cerber, and NotPetya in notoriety, elaborateness, and destructiveness.

90% of ransomware breaches come from innocuous-seeming emails that include dangerous links or file attachments, and a high percentage are so-called "zero-day" variants that elude the defenses of legacy signature-based antivirus tools. While user education and up-front identification are critical to defend your network against ransomware attacks, best practices demand that you take for granted some attacks will inevitably succeed and that you prepare a strong backup mechanism that allows you to restore files and services rapidly with little if any damage.

Progent's ProSight Ransomware Preparedness Report is an ultra-affordable service centered around a remote discussion with a Progent security consultant experienced in ransomware defense and recovery. During this assessment Progent will work directly with your Belo Horizonte IT managers to collect critical data about your cybersecurity setup and backup environment. Progent will utilize this information to generate a Basic Security and Best Practices Report documenting how to apply leading practices for implementing and managing your cybersecurity and backup systems to prevent or recover from a crypto-ransomware attack.

Progent's Basic Security and Best Practices Assessment focuses on key areas related to crypto-ransomware prevention and restoration recovery. The report addresses:

Cybersecurity

• Effective allocation and use of administration accounts
• Appropriate NTFS and SMB permissions
• Proper firewall settings
• Secure RDP configuration
• Guidance for AntiVirus (AV) tools identification and deployment

• Split permission architecture for backup integrity
• Protecting key servers including Active Directory
• Offsite backups with cloud backup to Microsoft Azure

About Ransomware
Ransomware is a form of malicious software that encrypts or steals files so they cannot be used or are publicized. Crypto-ransomware often locks the target's computer. To avoid the carnage, the victim is required to pay a certain ransom, usually in the form of a crypto currency such as Bitcoin, within a brief time window. There is no guarantee that delivering the extortion price will recover the damaged data or avoid its publication. Files can be altered or erased throughout a network based on the target's write permissions, and you cannot solve the military-grade encryption algorithms used on the compromised files. A typical ransomware delivery package is tainted email, in which the target is tricked into interacting with by means of a social engineering technique called spear phishing. This causes the email message to look as though it came from a trusted source. Another common attack vector is an improperly secured Remote Desktop Protocol (RDP) port.

CryptoLocker ushered in the new age of ransomware in 2013, and the monetary losses caused by the many versions of ransomware is estimated at billions of dollars annually, roughly doubling every other year. Notorious examples are Locky, and NotPetya. Recent high-profile threats like Ryuk, DoppelPaymer and Cerber are more complex and have wreaked more damage than earlier versions. Even if your backup procedures permit you to restore your encrypted data, you can still be hurt by so-called exfiltration, where stolen documents are made public. Because new versions of ransomware crop up daily, there is no guarantee that conventional signature-matching anti-virus tools will detect a new malware. If an attack does appear in an email, it is critical that your users have learned to identify phishing tricks. Your last line of defense is a solid scheme for performing and retaining offsite backups and the use of dependable recovery tools.

Contact Progent About the ProSight Crypto-Ransomware Susceptibility Checkup in Belo Horizonte
For pricing information and to find out more about how Progent's ProSight Ransomware Readiness Testing can enhance your defense against crypto-ransomware in Belo Horizonte, phone Progent at 800-462-8800 or visit Contact Progent.