Brasília Ransomware Filtering and Remediation Consulting

Ransomware has been widely adopted by the major cyber-crime organizations and rogue states, posing a potentially existential threat to businesses that are successfully attacked. The latest strains of ransomware target all vulnerable resources, including backup, making even partial recovery a long and costly process. New variations of crypto-ransomware such as Ryuk, Maze, Sodinokibi, Netwalker, Phobos, LockBit and Nephilim have emerged, replacing Locky, TeslaCrypt, and Petya in prominence, elaborateness, and destructiveness.

90% of ransomware penetrations come from innocent-looking emails that include dangerous hyperlinks or file attachments, and many are so-called "zero-day" strains that elude the defenses of traditional signature-based antivirus (AV) filters. Although user education and frontline detection are critical to protect your network against ransomware, best practices demand that you take for granted some attacks will inevitably get through and that you prepare a solid backup mechanism that allows you to repair the damage rapidly with minimal losses.

Progent's ProSight Ransomware Preparedness Assessment is an ultra-affordable service built around a remote interview with a Progent cybersecurity expert skilled in ransomware protection and repair. In the course of this interview Progent will cooperate directly with your Brasília IT managers to collect critical information about your security posture and backup processes. Progent will utilize this information to produce a Basic Security and Best Practices Report detailing how to follow best practices for configuring and administering your cybersecurity and backup systems to block or clean up after a crypto-ransomware assault.

Progent's Basic Security and Best Practices Assessment focuses on key issues related to ransomware prevention and restoration recovery. The review addresses:

Cybersecurity

• Correct allocation and use of administration accounts
• Correct NTFS and SMB (Server Message Block) authorizations
• Optimal firewall setup
• Safe RDP connections
• Advice about AntiVirus (AV) filtering selection and deployment

• Split permission architecture for backup integrity
• Protecting key servers such as Active Directory
• Offsite backups including cloud backup to Microsoft Azure

About Ransomware
Ransomware is a variety of malicious software that encrypts or deletes a victim's files so they are unusable or are made publicly available. Ransomware often locks the target's computer. To avoid the carnage, the victim is asked to send a specified amount of money, typically in the form of a crypto currency like Bitcoin, within a brief period of time. There is no guarantee that paying the ransom will restore the damaged files or avoid its publication. Files can be altered or erased throughout a network depending on the target's write permissions, and you cannot reverse engineer the strong encryption technologies used on the compromised files. A typical ransomware attack vector is tainted email, in which the user is tricked into responding to by a social engineering technique known as spear phishing. This makes the email to appear to come from a familiar source. Another common vulnerability is an improperly protected Remote Desktop Protocol port.

CryptoLocker ushered in the modern era of ransomware in 2013, and the damage attributed to by the many versions of ransomware is estimated at billions of dollars per year, roughly doubling every two years. Famous examples are Locky, and NotPetya. Current headline variants like Ryuk, Sodinokibi and TeslaCrypt are more complex and have wreaked more havoc than earlier versions. Even if your backup/recovery procedures enable your business to recover your ransomed files, you can still be threatened by so-called exfiltration, where ransomed data are made public (known as "doxxing"). Because additional variants of ransomware crop up every day, there is no certainty that traditional signature-matching anti-virus filters will block a new attack. If threat does show up in an email, it is critical that your users have learned to identify phishing techniques. Your last line of defense is a sound scheme for scheduling and retaining remote backups plus the use of dependable recovery platforms.

Ask Progent About the ProSight Crypto-Ransomware Susceptibility Assessment in Brasília
For pricing details and to learn more about how Progent's ProSight Crypto-Ransomware Readiness Assessment can bolster your defense against ransomware in Brasília, phone Progent at 800-462-8800 or visit Contact Progent.