Brasília Ransomware Defense and Cleanup Consulting

Ransomware has been widely adopted by the major cyber-crime organizations and bad-actor states, representing a possibly lethal threat to companies that fall victim. The latest strains of crypto-ransomware go after everything, including backup, making even partial recovery a challenging and costly exercise. New strains of crypto-ransomware like Ryuk, Maze, Sodinokibi, Mailto (aka Netwalker), DopplePaymer, LockBit and Egregor have emerged, replacing Locky, TeslaCrypt, and Petya in notoriety, sophistication, and destructiveness.

90% of crypto-ransomware breaches are the result of innocuous-looking emails with dangerous hyperlinks or attachments, and a high percentage are "zero-day" strains that elude detection by traditional signature-based antivirus (AV) filters. Although user training and up-front identification are important to protect your network against ransomware attacks, leading practices demand that you assume some malware will inevitably succeed and that you implement a solid backup mechanism that permits you to restore files and services rapidly with little if any losses.

Progent's ProSight Ransomware Preparedness Assessment is an ultra-affordable service centered around an online discussion with a Progent security consultant skilled in ransomware protection and recovery. In the course of this assessment Progent will cooperate with your Brasília IT managers to collect critical information about your cybersecurity setup and backup environment. Progent will use this information to create a Basic Security and Best Practices Assessment detailing how to apply best practices for implementing and administering your security and backup solution to prevent or recover from a crypto-ransomware assault.

Progent's Basic Security and Best Practices Report highlights vital areas associated with ransomware prevention and restoration recovery. The report covers:

Security

• Effective allocation and use of administration accounts
• Assigning NTFS and SMB authorizations
• Proper firewall setup
• Secure RDP access
• Recommend AntiVirus (AV) filtering identification and deployment

• Split permission architecture for backup protection
• Protecting key servers including Active Directory
• Offsite backups including cloud backup to Azure

About Ransomware
Ransomware is a variety of malicious software that encrypts or steals files so they cannot be used or are publicized. Crypto-ransomware sometimes locks the victim's computer. To prevent the damage, the victim is asked to send a certain amount of money (the ransom), usually in the form of a crypto currency like Bitcoin, within a short time window. There is no guarantee that delivering the extortion price will recover the lost data or avoid its publication. Files can be encrypted or deleted across a network based on the target's write permissions, and you cannot reverse engineer the strong encryption algorithms used on the compromised files. A common ransomware delivery package is booby-trapped email, whereby the victim is lured into responding to by a social engineering exploit known as spear phishing. This causes the email to look as though it came from a familiar sender. Another common attack vector is a poorly secured Remote Desktop Protocol port.

CryptoLocker ushered in the new age of crypto-ransomware in 2013, and the monetary losses caused by the many versions of ransomware is estimated at billions of dollars annually, roughly doubling every two years. Notorious attacks are WannaCry, and NotPetya. Current high-profile variants like Ryuk, Sodinokibi and CryptoWall are more sophisticated and have caused more damage than older versions. Even if your backup procedures permit your business to recover your ransomed data, you can still be threatened by exfiltration, where stolen data are exposed to the public. Because new variants of ransomware are launched daily, there is no guarantee that conventional signature-matching anti-virus tools will detect the latest attack. If an attack does appear in an email, it is critical that your end users have learned to be aware of phishing techniques. Your last line of protection is a solid process for scheduling and keeping offsite backups plus the deployment of dependable restoration tools.

Ask Progent About the ProSight Crypto-Ransomware Preparedness Consultation in Brasília
For pricing details and to find out more about how Progent's ProSight Ransomware Preparedness Review can enhance your defense against ransomware in Brasília, call Progent at 800-462-8800 or visit Contact Progent.