Brasília Ransomware Defense and Restoration Consulting

Ransomware has become the weapon of choice for the major cyber-crime organizations and malicious states, representing a potentially lethal threat to businesses that fall victim. Modern variations of crypto-ransomware target all vulnerable resources, including backup, making even partial restoration a complex and expensive process. Novel strains of ransomware like Ryuk, Maze, Sodinokibi, Netwalker, DopplePaymer, Snatch and Nephilim have emerged, displacing WannaCry, Cerber, and NotPetya in notoriety, elaborateness, and destructiveness.

Most ransomware infections are the result of innocuous-looking emails that have dangerous hyperlinks or file attachments, and a high percentage are "zero-day" variants that can escape detection by traditional signature-based antivirus filters. While user education and frontline identification are critical to defend against ransomware, leading practices dictate that you assume some attacks will inevitably get through and that you deploy a solid backup solution that permits you to repair the damage quickly with little if any damage.

Progent's ProSight Ransomware Preparedness Checkup is a low-cost service centered around an online interview with a Progent security expert skilled in ransomware protection and recovery. During this interview Progent will collaborate directly with your Brasília IT managers to collect critical data about your security posture and backup environment. Progent will use this data to create a Basic Security and Best Practices Report documenting how to follow leading practices for implementing and managing your security and backup systems to prevent or clean up after a ransomware assault.

Progent's Basic Security and Best Practices Report focuses on key areas associated with crypto-ransomware defense and restoration recovery. The report covers:

Cybersecurity

• Correct allocation and use of administration accounts
• Assigning NTFS and SMB (Server Message Block) permissions
• Proper firewall configuration
• Secure Remote Desktop Protocol access
• Advice about AntiVirus tools identification and configuration

• Split permission architecture for backup integrity
• Backing up critical servers such as Active Directory
• Offsite backups including cloud backup to Microsoft Azure

About Ransomware
Ransomware is a variety of malware that encrypts or steals a victim's files so they are unusable or are made publicly available. Crypto-ransomware often locks the victim's computer. To prevent the damage, the target is required to send a specified amount of money (the ransom), usually via a crypto currency such as Bitcoin, within a brief time window. There is no guarantee that paying the extortion price will recover the lost data or prevent its publication. Files can be altered or deleted across a network based on the target's write permissions, and you cannot break the strong encryption technologies used on the compromised files. A typical ransomware attack vector is spoofed email, whereby the target is lured into responding to by a social engineering exploit known as spear phishing. This causes the email message to look as though it came from a familiar source. Another popular vulnerability is an improperly protected Remote Desktop Protocol port.

CryptoLocker opened the modern era of ransomware in 2013, and the monetary losses attributed to by different strains of ransomware is estimated at billions of dollars per year, roughly doubling every two years. Famous attacks include WannaCry, and Petya. Recent headline variants like Ryuk, DoppelPaymer and Spora are more sophisticated and have caused more havoc than older versions. Even if your backup/recovery processes allow your business to restore your encrypted files, you can still be threatened by so-called exfiltration, where stolen documents are made public. Because additional variants of ransomware crop up every day, there is no guarantee that conventional signature-matching anti-virus filters will block the latest attack. If threat does appear in an email, it is critical that your users have learned to be aware of phishing techniques. Your last line of protection is a sound process for scheduling and retaining remote backups plus the deployment of dependable recovery tools.

Contact Progent About the ProSight Ransomware Readiness Testing in Brasília
For pricing information and to find out more about how Progent's ProSight Crypto-Ransomware Vulnerability Checkup can enhance your protection against ransomware in Brasília, call Progent at 800-462-8800 or visit Contact Progent.