Campinas Ransomware Defense and Recovery Consulting

Ransomware has been weaponized by cyber extortionists and bad-actor governments, posing a potentially lethal risk to businesses that fall victim. The latest versions of ransomware go after everything, including backup, making even selective restoration a challenging and expensive exercise. Novel variations of crypto-ransomware like Ryuk, Maze, Sodinokibi, Mailto (aka Netwalker), Phobos, Conti and Nephilim have made the headlines, displacing WannaCry, TeslaCrypt, and Petya in prominence, sophistication, and destructive impact.

90% of ransomware infections are caused by innocuous-looking emails that include malicious hyperlinks or file attachments, and many are "zero-day" strains that can escape detection by traditional signature-based antivirus (AV) tools. Although user education and frontline detection are critical to protect your network against ransomware, leading practices dictate that you assume some malware will inevitably get through and that you deploy a solid backup solution that allows you to restore files and services rapidly with little if any damage.

Progent's ProSight Ransomware Preparedness Report is an ultra-affordable service built around a remote interview with a Progent cybersecurity expert experienced in ransomware defense and recovery. In the course of this assessment Progent will work with your Campinas network management staff to collect critical data concerning your cybersecurity setup and backup environment. Progent will utilize this information to produce a Basic Security and Best Practices Report detailing how to apply leading practices for implementing and administering your cybersecurity and backup systems to block or clean up after a ransomware assault.

Progent's Basic Security and Best Practices Assessment highlights key areas related to crypto-ransomware defense and restoration recovery. The review addresses:

Security

• Proper use of administration accounts
• Correct NTFS and SMB authorizations
• Proper firewall settings
• Secure RDP connections
• Recommend AntiVirus tools identification and deployment

• Split permission model for backup integrity
• Backing up required servers including Active Directory
• Offsite backups including cloud backup to Microsoft Azure

About Ransomware
Ransomware is a form of malicious software that encrypts or steals files so they are unusable or are publicized. Ransomware often locks the target's computer. To avoid the carnage, the target is required to pay a certain ransom, usually in the form of a crypto currency such as Bitcoin, within a short time window. It is never certain that paying the extortion price will recover the damaged files or prevent its publication. Files can be altered or deleted across a network based on the target's write permissions, and you cannot solve the strong encryption technologies used on the hostage files. A common ransomware delivery package is spoofed email, whereby the target is tricked into responding to by a social engineering technique known as spear phishing. This makes the email message to appear to come from a trusted sender. Another common attack vector is an improperly secured RDP port.

CryptoLocker ushered in the new age of ransomware in 2013, and the damage caused by the many versions of ransomware is estimated at billions of dollars per year, more than doubling every other year. Notorious examples include WannaCry, and NotPetya. Recent high-profile variants like Ryuk, Sodinokibi and Spora are more sophisticated and have caused more damage than older strains. Even if your backup processes permit you to recover your ransomed files, you can still be threatened by so-called exfiltration, where ransomed data are made public. Because additional variants of ransomware crop up every day, there is no guarantee that conventional signature-matching anti-virus filters will block the latest attack. If threat does show up in an email, it is important that your end users have been taught to be aware of phishing techniques. Your ultimate protection is a solid scheme for performing and retaining remote backups plus the use of dependable recovery tools.

Ask Progent About the ProSight Ransomware Readiness Audit in Campinas
For pricing details and to learn more about how Progent's ProSight Ransomware Susceptibility Checkup can bolster your defense against ransomware in Campinas, phone Progent at 800-462-8800 or see Contact Progent.