Albany Ransomware Filtering and Remediation Expertise

Ransomware has been widely adopted by cybercriminals and rogue states, posing a potentially lethal threat to businesses that are victimized. Modern strains of ransomware go after everything, including backup, making even selective recovery a long and expensive exercise. Novel versions of crypto-ransomware like Ryuk, Maze, Sodinokibi, Netwalker, DopplePaymer, Conti and Nephilim have made the headlines, replacing WannaCry, TeslaCrypt, and CryptoWall in prominence, elaborateness, and destructiveness.

90% of crypto-ransomware breaches come from innocuous-seeming emails that include dangerous links or attachments, and a high percentage are "zero-day" attacks that elude detection by traditional signature-matching antivirus filters. Although user education and frontline detection are important to defend your network against ransomware, leading practices demand that you take for granted some malware will inevitably get through and that you implement a solid backup mechanism that permits you to repair the damage rapidly with minimal losses.

Progent's ProSight Ransomware Preparedness Checkup is a low-cost service built around a remote discussion with a Progent security consultant skilled in ransomware defense and recovery. In the course of this interview Progent will work directly with your Albany IT management staff to collect critical information concerning your security setup and backup processes. Progent will utilize this data to generate a Basic Security and Best Practices Report documenting how to follow leading practices for implementing and administering your security and backup solution to block or recover from a ransomware attack.

Progent's Basic Security and Best Practices Report highlights vital issues related to crypto-ransomware defense and restoration recovery. The report covers:

Security

• Effective use of administration accounts
• Correct NTFS (New Technology File System) and SMB permissions
• Proper firewall configuration
• Secure Remote Desktop Protocol (RDP) access
• Advice about AntiVirus (AV) filtering identification and deployment

• Split permission model for backup protection
• Protecting key servers such as AD
• Geographically dispersed backups with cloud backup to Microsoft Azure

About Ransomware
Ransomware is a variety of malware that encrypts or deletes a victim's files so they are unusable or are publicized. Ransomware sometimes locks the victim's computer. To avoid the carnage, the target is required to pay a specified ransom, usually via a crypto currency like Bitcoin, within a short period of time. It is not guaranteed that paying the extortion price will recover the lost files or avoid its exposure to the public. Files can be encrypted or deleted throughout a network based on the target's write permissions, and you cannot break the military-grade encryption algorithms used on the hostage files. A common ransomware attack vector is tainted email, whereby the user is lured into responding to by means of a social engineering technique called spear phishing. This causes the email message to look as though it came from a trusted source. Another popular attack vector is a poorly secured Remote Desktop Protocol port.

CryptoLocker ushered in the modern era of crypto-ransomware in 2013, and the monetary losses attributed to by the many strains of ransomware is estimated at billions of dollars per year, roughly doubling every two years. Famous examples include Locky, and NotPetya. Current headline threats like Ryuk, DoppelPaymer and CryptoWall are more elaborate and have caused more damage than older strains. Even if your backup procedures allow your business to recover your ransomed files, you can still be hurt by exfiltration, where ransomed documents are exposed to the public. Because additional variants of ransomware are launched every day, there is no certainty that traditional signature-matching anti-virus filters will block the latest malware. If an attack does show up in an email, it is important that your users have learned to be aware of social engineering techniques. Your last line of defense is a solid scheme for scheduling and retaining offsite backups plus the use of reliable recovery platforms.

Contact Progent About the ProSight Crypto-Ransomware Readiness Review in Albany
For pricing information and to learn more about how Progent's ProSight Crypto-Ransomware Preparedness Report can bolster your protection against ransomware in Albany, call Progent at 800-462-8800 or see Contact Progent.