Brighton Ransomware Filtering and Remediation Services

Ransomware has been weaponized by the major cyber-crime organizations and bad-actor states, posing a possibly existential risk to businesses that are victimized. The latest strains of ransomware target everything, including online backup, making even selective recovery a long and costly exercise. Novel versions of crypto-ransomware such as Ryuk, Maze, Sodinokibi, Netwalker, DopplePaymer, LockBit and Egregor have made the headlines, replacing WannaCry, Spora, and NotPetya in notoriety, elaborateness, and destructive impact.

90% of ransomware breaches are the result of innocuous-looking emails that include dangerous links or file attachments, and a high percentage are "zero-day" strains that elude detection by legacy signature-based antivirus (AV) filters. While user training and up-front identification are critical to protect your network against ransomware, leading practices demand that you assume some attacks will inevitably get through and that you prepare a strong backup mechanism that enables you to repair the damage rapidly with minimal damage.

Progent's ProSight Ransomware Vulnerability Assessment is an ultra-affordable service centered around a remote interview with a Progent cybersecurity consultant skilled in ransomware defense and recovery. In the course of this assessment Progent will cooperate directly with your Brighton network management staff to gather critical data about your cybersecurity setup and backup environment. Progent will utilize this information to produce a Basic Security and Best Practices Report detailing how to apply leading practices for implementing and managing your cybersecurity and backup systems to prevent or clean up after a ransomware assault.

Progent's Basic Security and Best Practices Assessment focuses on vital issues associated with crypto-ransomware prevention and restoration recovery. The review addresses:

Cybersecurity

• Correct use of admin accounts
• Correct NTFS (New Technology File System) and SMB (Server Message Block) authorizations
• Proper firewall configuration
• Secure Remote Desktop Protocol (RDP) connections
• Advice about AntiVirus (AV) filtering identification and deployment

• Split permission model for backup integrity
• Backing up key servers including AD
• Geographically dispersed backups with cloud backup to Azure

About Ransomware
Ransomware is a form of malware that encrypts or deletes files so they are unusable or are made publicly available. Ransomware often locks the victim's computer. To prevent the damage, the victim is asked to send a certain amount of money, usually in the form of a crypto currency such as Bitcoin, within a short period of time. It is not guaranteed that paying the ransom will restore the lost data or avoid its exposure to the public. Files can be encrypted or deleted throughout a network depending on the target's write permissions, and you cannot solve the military-grade encryption technologies used on the hostage files. A common ransomware attack vector is tainted email, whereby the user is lured into interacting with by a social engineering exploit known as spear phishing. This causes the email to look as though it came from a trusted source. Another popular attack vector is a poorly secured Remote Desktop Protocol port.

CryptoLocker ushered in the modern era of crypto-ransomware in 2013, and the monetary losses attributed to by the many versions of ransomware is estimated at billions of dollars annually, more than doubling every two years. Notorious examples are Locky, and NotPetya. Recent high-profile threats like Ryuk, Sodinokibi and TeslaCrypt are more complex and have wreaked more damage than older versions. Even if your backup processes allow your business to recover your encrypted files, you can still be hurt by exfiltration, where stolen documents are made public (known as "doxxing"). Because additional variants of ransomware crop up every day, there is no certainty that traditional signature-based anti-virus tools will detect the latest malware. If threat does show up in an email, it is important that your users have been taught to identify social engineering techniques. Your ultimate protection is a sound scheme for performing and retaining offsite backups and the deployment of reliable recovery platforms.

Contact Progent About the ProSight Crypto-Ransomware Susceptibility Consultation in Brighton
For pricing information and to find out more about how Progent's ProSight Ransomware Readiness Checkup can bolster your defense against crypto-ransomware in Brighton, phone Progent at 800-462-8800 or visit Contact Progent.