Chesapeake Ransomware Prevention and Cleanup Solutions

Ransomware has been widely adopted by the major cyber-crime organizations and bad-actor states, posing a possibly lethal risk to companies that are breached. The latest versions of ransomware target everything, including backup, making even selective restoration a challenging and expensive process. Novel variations of ransomware such as Ryuk, Maze, Sodinokibi, Mailto (aka Netwalker), DopplePaymer, Conti and Egregor have emerged, displacing WannaCry, Cerber, and NotPetya in prominence, sophistication, and destructiveness.

Most crypto-ransomware breaches come from innocuous-looking emails that include malicious links or file attachments, and a high percentage are "zero-day" variants that can escape the defenses of traditional signature-based antivirus tools. Although user training and frontline detection are critical to defend your network against ransomware attacks, best practices demand that you expect that some attacks will inevitably succeed and that you prepare a solid backup solution that enables you to recover quickly with little if any losses.

Progent's ProSight Ransomware Preparedness Report is a low-cost service built around an online discussion with a Progent security consultant experienced in ransomware defense and repair. In the course of this assessment Progent will cooperate with your Chesapeake network managers to collect critical data concerning your security configuration and backup processes. Progent will use this information to generate a Basic Security and Best Practices Assessment detailing how to adhere to leading practices for implementing and administering your cybersecurity and backup solution to prevent or recover from a crypto-ransomware attack.

Progent's Basic Security and Best Practices Assessment highlights key issues related to crypto-ransomware prevention and restoration recovery. The review covers:

Cybersecurity

• Correct allocation and use of admin accounts
• Assigning NTFS and SMB (Server Message Block) authorizations
• Optimal firewall settings
• Secure RDP connections
• Advice about AntiVirus (AV) filtering selection and configuration

• Split permission architecture for backup protection
• Protecting required servers including AD
• Offsite backups including cloud backup to Azure

About Ransomware
Ransomware is a type of malware that encrypts or deletes a victim's files so they are unusable or are publicized. Crypto-ransomware often locks the target's computer. To avoid the damage, the target is required to pay a certain amount of money, typically in the form of a crypto currency like Bitcoin, within a brief time window. There is no guarantee that delivering the extortion price will recover the lost data or avoid its publication. Files can be altered or erased throughout a network based on the victim's write permissions, and you cannot break the military-grade encryption technologies used on the hostage files. A common ransomware attack vector is tainted email, in which the target is tricked into responding to by a social engineering technique known as spear phishing. This causes the email message to look as though it came from a familiar source. Another common attack vector is an improperly protected Remote Desktop Protocol (RDP) port.

The ransomware variant CryptoLocker ushered in the modern era of crypto-ransomware in 2013, and the damage attributed to by the many versions of ransomware is estimated at billions of dollars annually, more than doubling every two years. Famous examples are Locky, and Petya. Current high-profile variants like Ryuk, Maze and CryptoWall are more elaborate and have caused more havoc than older strains. Even if your backup/recovery procedures permit you to restore your ransomed files, you can still be hurt by exfiltration, where ransomed data are made public. Because additional versions of ransomware are launched daily, there is no guarantee that traditional signature-matching anti-virus tools will block a new attack. If threat does show up in an email, it is important that your users have learned to be aware of social engineering techniques. Your ultimate protection is a solid process for performing and keeping offsite backups and the use of reliable restoration tools.

Ask Progent About the ProSight Crypto-Ransomware Readiness Testing in Chesapeake
For pricing information and to find out more about how Progent's ProSight Crypto-Ransomware Vulnerability Checkup can bolster your protection against ransomware in Chesapeake, phone Progent at 800-462-8800 or see Contact Progent.