Brisbane Ransomware Protection and Recovery Solutions

Ransomware has been weaponized by cyber extortionists and malicious governments, representing a potentially lethal risk to companies that are victimized. Modern versions of ransomware target all vulnerable resources, including backup, making even partial recovery a complex and costly process. Novel strains of ransomware like Ryuk, Maze, Sodinokibi, Mailto (aka Netwalker), Phobos, Conti and Egregor have emerged, displacing WannaCry, Cerber, and CryptoWall in notoriety, sophistication, and destructive impact.

Most crypto-ransomware infections come from innocent-looking emails that have dangerous hyperlinks or file attachments, and many are "zero-day" strains that can escape the defenses of traditional signature-based antivirus (AV) tools. While user training and up-front detection are important to defend against ransomware, best practices dictate that you assume some malware will eventually succeed and that you put in place a strong backup solution that enables you to repair the damage rapidly with minimal losses.

Progent's ProSight Ransomware Vulnerability Report is a low-cost service centered around an online discussion with a Progent cybersecurity consultant skilled in ransomware defense and repair. During this assessment Progent will collaborate directly with your Brisbane network managers to gather pertinent data concerning your security profile and backup environment. Progent will utilize this information to produce a Basic Security and Best Practices Assessment documenting how to apply best practices for configuring and administering your cybersecurity and backup systems to block or clean up after a ransomware assault.

Progent's Basic Security and Best Practices Assessment highlights vital areas associated with crypto-ransomware defense and restoration recovery. The report addresses:

Cybersecurity

• Correct allocation and use of admin accounts
• Correct NTFS and SMB permissions
• Optimal firewall settings
• Secure Remote Desktop Protocol (RDP) configuration
• Advice about AntiVirus filtering selection and deployment

• Split permission model for backup protection
• Backing up required servers including Active Directory
• Geographically dispersed backups with cloud backup to Azure

About Ransomware
Ransomware is a form of malware that encrypts or deletes a victim's files so they are unusable or are made publicly available. Ransomware sometimes locks the victim's computer. To avoid the damage, the victim is required to send a certain amount of money, typically in the form of a crypto currency like Bitcoin, within a brief time window. There is no guarantee that delivering the ransom will recover the damaged data or prevent its publication. Files can be encrypted or erased throughout a network depending on the target's write permissions, and you cannot reverse engineer the military-grade encryption technologies used on the compromised files. A common ransomware attack vector is spoofed email, whereby the user is lured into responding to by means of a social engineering technique called spear phishing. This makes the email message to look as though it came from a trusted source. Another popular attack vector is an improperly secured RDP port.

The ransomware variant CryptoLocker ushered in the new age of crypto-ransomware in 2013, and the damage caused by the many versions of ransomware is estimated at billions of dollars annually, more than doubling every other year. Famous examples are Locky, and Petya. Recent high-profile threats like Ryuk, DoppelPaymer and CryptoWall are more sophisticated and have caused more damage than earlier versions. Even if your backup procedures allow your business to recover your encrypted data, you can still be threatened by so-called exfiltration, where ransomed documents are made public. Because new variants of ransomware crop up daily, there is no guarantee that traditional signature-matching anti-virus filters will detect a new attack. If threat does appear in an email, it is critical that your end users have learned to be aware of phishing techniques. Your last line of protection is a solid scheme for performing and retaining offsite backups plus the use of reliable recovery platforms.

Ask Progent About the ProSight Crypto-Ransomware Preparedness Checkup in Brisbane
For pricing information and to find out more about how Progent's ProSight Crypto-Ransomware Susceptibility Report can enhance your defense against crypto-ransomware in Brisbane, call Progent at 800-462-8800 or see Contact Progent.