Chesapeake Ransomware Prevention and Remediation Services

Ransomware has become the weapon of choice for the major cyber-crime organizations and rogue states, posing a potentially existential risk to businesses that are victimized. The latest versions of crypto-ransomware target everything, including backup, making even partial restoration a challenging and costly exercise. Novel versions of crypto-ransomware like Ryuk, Maze, Sodinokibi, Netwalker, Phobos, Snatch and Egregor have made the headlines, displacing WannaCry, Spora, and CryptoWall in notoriety, elaborateness, and destructiveness.

Most crypto-ransomware penetrations come from innocent-seeming emails with dangerous links or attachments, and many are "zero-day" attacks that can escape the defenses of legacy signature-matching antivirus tools. Although user training and up-front identification are important to protect your network against ransomware, leading practices dictate that you take for granted some attacks will eventually succeed and that you implement a solid backup mechanism that allows you to restore files and services quickly with little if any damage.

Progent's ProSight Ransomware Preparedness Checkup is a low-cost service centered around a remote discussion with a Progent cybersecurity consultant skilled in ransomware defense and recovery. During this assessment Progent will cooperate with your Chesapeake IT managers to gather pertinent information concerning your security configuration and backup processes. Progent will utilize this information to generate a Basic Security and Best Practices Assessment detailing how to follow leading practices for configuring and managing your cybersecurity and backup systems to block or recover from a crypto-ransomware assault.

Progent's Basic Security and Best Practices Report highlights key issues related to ransomware defense and restoration recovery. The report covers:

Cybersecurity

• Effective use of admin accounts
• Assigning NTFS (New Technology File System) and SMB (Server Message Block) permissions
• Proper firewall settings
• Safe RDP connections
• Recommend AntiVirus (AV) tools identification and configuration

• Split permission model for backup integrity
• Protecting critical servers such as AD
• Geographically dispersed backups including cloud backup to Microsoft Azure

About Ransomware
Ransomware is a form of malware that encrypts or steals files so they are unusable or are made publicly available. Ransomware sometimes locks the target's computer. To prevent the carnage, the target is asked to send a specified amount of money (the ransom), usually in the form of a crypto currency such as Bitcoin, within a brief period of time. There is no guarantee that paying the ransom will recover the lost data or prevent its publication. Files can be altered or erased across a network based on the target's write permissions, and you cannot solve the strong encryption technologies used on the compromised files. A typical ransomware attack vector is tainted email, whereby the victim is lured into responding to by means of a social engineering technique known as spear phishing. This causes the email message to look as though it came from a trusted source. Another popular attack vector is an improperly protected Remote Desktop Protocol port.

The ransomware variant CryptoLocker opened the modern era of crypto-ransomware in 2013, and the monetary losses attributed to by different versions of ransomware is said to be billions of dollars annually, more than doubling every two years. Notorious examples are Locky, and NotPetya. Current high-profile variants like Ryuk, Sodinokibi and Spora are more complex and have wreaked more havoc than older versions. Even if your backup/recovery processes permit your business to recover your encrypted files, you can still be threatened by exfiltration, where stolen data are made public. Because additional variants of ransomware are launched every day, there is no certainty that conventional signature-matching anti-virus tools will detect a new malware. If an attack does appear in an email, it is critical that your users have been taught to identify social engineering techniques. Your last line of protection is a solid process for scheduling and retaining remote backups plus the use of reliable recovery platforms.

Contact Progent About the ProSight Crypto-Ransomware Susceptibility Checkup in Chesapeake
For pricing details and to find out more about how Progent's ProSight Crypto-Ransomware Readiness Review can bolster your defense against ransomware in Chesapeake, phone Progent at 800-462-8800 or visit Contact Progent.