Albuquerque Ransomware Defense and Recovery Solutions

Ransomware has been weaponized by cyber extortionists and rogue governments, representing a possibly existential risk to businesses that are breached. Current versions of ransomware target all vulnerable resources, including backup, making even partial restoration a long and expensive exercise. New strains of crypto-ransomware such as Ryuk, Maze, Sodinokibi, Netwalker, DopplePaymer, Conti and Nephilim have made the headlines, replacing WannaCry, Cerber, and Petya in notoriety, sophistication, and destructiveness.

Most crypto-ransomware penetrations are the result of innocuous-seeming emails with malicious links or attachments, and many are so-called "zero-day" variants that elude detection by legacy signature-based antivirus (AV) tools. While user education and frontline detection are important to protect your network against ransomware, leading practices demand that you expect that some malware will eventually get through and that you deploy a solid backup mechanism that allows you to repair the damage quickly with minimal damage.

Progent's ProSight Ransomware Preparedness Checkup is a low-cost service built around an online interview with a Progent security expert skilled in ransomware defense and repair. During this interview Progent will work directly with your Albuquerque IT managers to gather critical information about your security profile and backup environment. Progent will use this data to create a Basic Security and Best Practices Assessment detailing how to adhere to best practices for implementing and managing your security and backup solution to block or clean up after a ransomware attack.

Progent's Basic Security and Best Practices Assessment highlights key areas associated with ransomware prevention and restoration recovery. The report addresses:

Cybersecurity

• Correct allocation and use of admin accounts
• Assigning NTFS (New Technology File System) and SMB permissions
• Proper firewall configuration
• Secure Remote Desktop Protocol (RDP) configuration
• Recommend AntiVirus (AV) tools identification and configuration

• Split permission architecture for backup integrity
• Backing up required servers including Active Directory
• Offsite backups with cloud backup to Microsoft Azure

About Ransomware
Ransomware is a type of malicious software that encrypts or deletes files so they cannot be used or are made publicly available. Crypto-ransomware often locks the target's computer. To avoid the damage, the victim is asked to send a certain amount of money (the ransom), usually in the form of a crypto currency such as Bitcoin, within a short period of time. It is never certain that delivering the extortion price will recover the lost data or prevent its exposure to the public. Files can be altered or erased throughout a network depending on the target's write permissions, and you cannot reverse engineer the strong encryption technologies used on the compromised files. A typical ransomware delivery package is tainted email, whereby the victim is tricked into interacting with by means of a social engineering technique called spear phishing. This makes the email message to look as though it came from a familiar sender. Another common vulnerability is a poorly protected RDP port.

The ransomware variant CryptoLocker opened the modern era of crypto-ransomware in 2013, and the monetary losses attributed to by the many strains of ransomware is said to be billions of dollars annually, roughly doubling every two years. Famous attacks include WannaCry, and Petya. Current high-profile variants like Ryuk, DoppelPaymer and Cerber are more complex and have caused more damage than earlier strains. Even if your backup/recovery procedures allow you to recover your ransomed files, you can still be threatened by so-called exfiltration, where ransomed documents are exposed to the public (known as "doxxing"). Because additional variants of ransomware are launched every day, there is no guarantee that traditional signature-matching anti-virus tools will block the latest malware. If an attack does appear in an email, it is critical that your end users have learned to be aware of social engineering techniques. Your ultimate defense is a solid process for performing and keeping offsite backups and the use of dependable restoration tools.

Ask Progent About the ProSight Crypto-Ransomware Readiness Review in Albuquerque
For pricing details and to learn more about how Progent's ProSight Crypto-Ransomware Susceptibility Review can bolster your defense against ransomware in Albuquerque, call Progent at 800-462-8800 or visit Contact Progent.