Belo Horizonte Ransomware Filtering and Removal Expertise

Ransomware has been weaponized by cyber extortionists and bad-actor governments, posing a potentially existential threat to businesses that are victimized. Modern variations of ransomware go after all vulnerable resources, including backup, making even selective restoration a challenging and expensive exercise. Novel variations of crypto-ransomware such as Ryuk, Maze, Sodinokibi, Mailto (aka Netwalker), DopplePaymer, LockBit and Egregor have made the headlines, displacing WannaCry, Cerber, and Petya in prominence, elaborateness, and destructiveness.

Most crypto-ransomware penetrations are the result of innocent-seeming emails that include malicious links or attachments, and many are so-called "zero-day" variants that can escape detection by traditional signature-based antivirus tools. While user education and up-front identification are critical to protect against ransomware, leading practices demand that you expect that some malware will inevitably get through and that you implement a solid backup solution that enables you to recover quickly with minimal losses.

Progent's ProSight Ransomware Vulnerability Report is a low-cost service centered around an online interview with a Progent security expert skilled in ransomware defense and repair. In the course of this assessment Progent will cooperate with your Belo Horizonte network managers to collect pertinent data concerning your security setup and backup environment. Progent will utilize this data to create a Basic Security and Best Practices Assessment documenting how to apply leading practices for configuring and administering your security and backup systems to block or recover from a ransomware assault.

Progent's Basic Security and Best Practices Assessment focuses on key issues associated with crypto-ransomware defense and restoration recovery. The report addresses:

Cybersecurity

• Effective allocation and use of administration accounts
• Appropriate NTFS (New Technology File System) and SMB (Server Message Block) permissions
• Proper firewall setup
• Safe RDP access
• Guidance for AntiVirus filtering identification and deployment

• Split permission model for backup integrity
• Protecting required servers including AD
• Offsite backups with cloud backup to Azure

About Ransomware
Ransomware is a type of malicious software that encrypts or deletes a victim's files so they are unusable or are made publicly available. Crypto-ransomware often locks the victim's computer. To prevent the carnage, the target is asked to send a specified ransom, typically via a crypto currency like Bitcoin, within a short time window. It is not guaranteed that delivering the extortion price will recover the lost files or prevent its exposure to the public. Files can be encrypted or deleted across a network based on the victim's write permissions, and you cannot solve the strong encryption algorithms used on the hostage files. A common ransomware delivery package is spoofed email, whereby the target is tricked into responding to by means of a social engineering exploit called spear phishing. This causes the email message to look as though it came from a familiar source. Another common attack vector is a poorly secured Remote Desktop Protocol (RDP) port.

The ransomware variant CryptoLocker opened the new age of ransomware in 2013, and the monetary losses attributed to by the many strains of ransomware is said to be billions of dollars annually, roughly doubling every other year. Notorious examples are WannaCry, and Petya. Current headline variants like Ryuk, Sodinokibi and Spora are more sophisticated and have wreaked more damage than older strains. Even if your backup procedures allow your business to restore your ransomed files, you can still be threatened by so-called exfiltration, where ransomed data are exposed to the public (known as "doxxing"). Because new versions of ransomware crop up every day, there is no certainty that traditional signature-matching anti-virus filters will block a new malware. If threat does show up in an email, it is critical that your end users have learned to identify phishing techniques. Your ultimate defense is a solid process for performing and retaining remote backups plus the deployment of reliable recovery platforms.

Ask Progent About the ProSight Crypto-Ransomware Vulnerability Assessment in Belo Horizonte
For pricing details and to learn more about how Progent's ProSight Ransomware Preparedness Review can enhance your defense against crypto-ransomware in Belo Horizonte, call Progent at 800-462-8800 or visit Contact Progent.