Dayton Ransomware Filtering and Recovery Expertise

Ransomware has been weaponized by cyber extortionists and bad-actor governments, representing a possibly existential risk to businesses that are victimized. Modern versions of ransomware target all vulnerable resources, including online backup, making even selective restoration a complex and expensive process. Novel versions of crypto-ransomware such as Ryuk, Maze, Sodinokibi, Netwalker, Phobos, LockBit and Nephilim have made the headlines, replacing WannaCry, Cerber, and Petya in notoriety, sophistication, and destructive impact.

Most crypto-ransomware breaches are the result of innocuous-seeming emails with dangerous links or attachments, and many are so-called "zero-day" strains that elude detection by legacy signature-matching antivirus (AV) filters. While user training and frontline detection are important to defend against ransomware attacks, leading practices demand that you take for granted some attacks will eventually succeed and that you put in place a strong backup solution that allows you to repair the damage quickly with little if any losses.

Progent's ProSight Ransomware Preparedness Report is a low-cost service centered around a remote interview with a Progent cybersecurity expert skilled in ransomware defense and recovery. During this interview Progent will cooperate directly with your Dayton IT management staff to collect critical information about your cybersecurity configuration and backup environment. Progent will use this information to generate a Basic Security and Best Practices Report documenting how to follow leading practices for configuring and managing your security and backup systems to prevent or recover from a ransomware attack.

Progent's Basic Security and Best Practices Assessment highlights key areas associated with ransomware prevention and restoration recovery. The review covers:

Security

• Correct allocation and use of admin accounts
• Assigning NTFS and SMB (Server Message Block) authorizations
• Optimal firewall configuration
• Safe Remote Desktop Protocol (RDP) configuration
• Advice about AntiVirus (AV) filtering identification and deployment

• Split permission architecture for backup integrity
• Backing up critical servers including AD
• Geographically dispersed backups including cloud backup to Azure

About Ransomware
Ransomware is a variety of malicious software that encrypts or deletes a victim's files so they are unusable or are publicized. Crypto-ransomware often locks the target's computer. To avoid the carnage, the victim is asked to send a certain ransom, typically via a crypto currency like Bitcoin, within a short period of time. It is not guaranteed that delivering the extortion price will recover the damaged files or prevent its publication. Files can be altered or deleted across a network based on the target's write permissions, and you cannot reverse engineer the strong encryption algorithms used on the compromised files. A typical ransomware delivery package is booby-trapped email, in which the user is lured into responding to by a social engineering exploit known as spear phishing. This causes the email to look as though it came from a familiar sender. Another popular vulnerability is an improperly secured Remote Desktop Protocol (RDP) port.

The ransomware variant CryptoLocker ushered in the new age of ransomware in 2013, and the monetary losses caused by different versions of ransomware is estimated at billions of dollars per year, roughly doubling every other year. Notorious examples include Locky, and NotPetya. Recent headline variants like Ryuk, DoppelPaymer and TeslaCrypt are more complex and have wreaked more havoc than older strains. Even if your backup/recovery procedures allow you to restore your ransomed files, you can still be hurt by so-called exfiltration, where ransomed data are exposed to the public. Because new versions of ransomware crop up daily, there is no guarantee that conventional signature-matching anti-virus tools will detect a new attack. If threat does appear in an email, it is critical that your end users have been taught to be aware of phishing tricks. Your last line of defense is a sound scheme for scheduling and keeping remote backups and the use of dependable recovery platforms.

Contact Progent About the ProSight Ransomware Preparedness Review in Dayton
For pricing details and to learn more about how Progent's ProSight Ransomware Susceptibility Checkup can bolster your defense against ransomware in Dayton, phone Progent at 800-462-8800 or see Contact Progent.