Chesapeake Ransomware Filtering and Cleanup Services

Ransomware has been weaponized by the major cyber-crime organizations and bad-actor states, posing a potentially existential threat to companies that are breached. The latest versions of crypto-ransomware go after everything, including backup, making even partial restoration a challenging and costly exercise. Novel versions of ransomware such as Ryuk, Maze, Sodinokibi, Mailto (aka Netwalker), DopplePaymer, LockBit and Nephilim have emerged, replacing Locky, TeslaCrypt, and Petya in prominence, sophistication, and destructive impact.

90% of crypto-ransomware breaches are caused by innocent-looking emails with malicious hyperlinks or file attachments, and a high percentage are "zero-day" attacks that can escape detection by traditional signature-matching antivirus filters. While user training and up-front identification are important to protect against ransomware attacks, leading practices demand that you assume some attacks will eventually get through and that you put in place a strong backup solution that allows you to repair the damage rapidly with little if any losses.

Progent's ProSight Ransomware Vulnerability Assessment is an ultra-affordable service centered around an online interview with a Progent security consultant experienced in ransomware defense and repair. During this assessment Progent will collaborate directly with your Chesapeake network management staff to collect pertinent information concerning your security setup and backup processes. Progent will use this data to create a Basic Security and Best Practices Assessment detailing how to apply leading practices for implementing and managing your cybersecurity and backup systems to prevent or clean up after a ransomware assault.

Progent's Basic Security and Best Practices Assessment highlights vital issues associated with crypto-ransomware defense and restoration recovery. The review addresses:

Security

• Correct allocation and use of admin accounts
• Appropriate NTFS and SMB permissions
• Proper firewall configuration
• Secure Remote Desktop Protocol (RDP) access
• Advice about AntiVirus tools selection and configuration

• Split permission model for backup integrity
• Protecting key servers including Active Directory
• Offsite backups including cloud backup to Azure

About Ransomware
Ransomware is a variety of malicious software that encrypts or steals files so they are unusable or are made publicly available. Crypto-ransomware often locks the target's computer. To avoid the carnage, the victim is required to pay a certain amount of money, typically via a crypto currency such as Bitcoin, within a short time window. It is never certain that paying the extortion price will recover the lost data or avoid its publication. Files can be altered or erased throughout a network depending on the victim's write permissions, and you cannot solve the strong encryption algorithms used on the hostage files. A common ransomware attack vector is spoofed email, in which the victim is tricked into responding to by a social engineering technique called spear phishing. This makes the email to appear to come from a trusted sender. Another popular attack vector is an improperly protected RDP port.

CryptoLocker ushered in the new age of crypto-ransomware in 2013, and the monetary losses attributed to by the many versions of ransomware is said to be billions of dollars annually, roughly doubling every other year. Notorious attacks include Locky, and NotPetya. Recent headline threats like Ryuk, Maze and CryptoWall are more elaborate and have caused more damage than older versions. Even if your backup procedures permit you to recover your ransomed files, you can still be hurt by exfiltration, where ransomed data are made public. Because additional versions of ransomware are launched daily, there is no guarantee that traditional signature-matching anti-virus tools will detect a new malware. If an attack does show up in an email, it is critical that your end users have learned to be aware of phishing techniques. Your ultimate protection is a solid process for performing and keeping remote backups plus the deployment of reliable recovery tools.

Contact Progent About the ProSight Ransomware Susceptibility Report in Chesapeake
For pricing information and to learn more about how Progent's ProSight Crypto-Ransomware Vulnerability Evaluation can bolster your defense against ransomware in Chesapeake, phone Progent at 800-462-8800 or see Contact Progent.