Memphis Ransomware Defense and Recovery Solutions

Ransomware has been widely adopted by cybercriminals and bad-actor governments, posing a potentially lethal threat to businesses that fall victim. The latest variations of ransomware go after all vulnerable resources, including backup, making even selective restoration a complex and costly process. Novel strains of crypto-ransomware like Ryuk, Maze, Sodinokibi, Mailto (aka Netwalker), DopplePaymer, LockBit and Nephilim have emerged, displacing Locky, TeslaCrypt, and CryptoWall in prominence, elaborateness, and destructiveness.

90% of ransomware breaches are the result of innocent-looking emails that include dangerous links or file attachments, and many are so-called "zero-day" variants that can escape the defenses of traditional signature-based antivirus tools. While user education and frontline detection are critical to protect your network against ransomware attacks, best practices demand that you assume some malware will inevitably get through and that you deploy a solid backup mechanism that permits you to recover quickly with little if any damage.

Progent's ProSight Ransomware Vulnerability Report is a low-cost service centered around an online discussion with a Progent security expert skilled in ransomware defense and recovery. During this interview Progent will cooperate directly with your Memphis IT management staff to collect critical data about your security posture and backup environment. Progent will use this information to generate a Basic Security and Best Practices Report detailing how to follow leading practices for implementing and administering your cybersecurity and backup systems to prevent or clean up after a ransomware assault.

Progent's Basic Security and Best Practices Assessment focuses on key areas related to crypto-ransomware prevention and restoration recovery. The review covers:

Cybersecurity

• Proper use of admin accounts
• Assigning NTFS (New Technology File System) and SMB permissions
• Proper firewall configuration
• Safe Remote Desktop Protocol (RDP) configuration
• Advice about AntiVirus (AV) tools identification and deployment

• Split permission architecture for backup protection
• Backing up required servers such as Active Directory
• Offsite backups with cloud backup to Azure

About Ransomware
Ransomware is a form of malicious software that encrypts or steals a victim's files so they are unusable or are publicized. Crypto-ransomware often locks the target's computer. To avoid the carnage, the victim is asked to pay a specified ransom, usually via a crypto currency such as Bitcoin, within a brief period of time. It is never certain that paying the extortion price will recover the lost files or prevent its exposure to the public. Files can be encrypted or deleted across a network based on the target's write permissions, and you cannot solve the strong encryption technologies used on the compromised files. A typical ransomware delivery package is booby-trapped email, whereby the user is lured into responding to by means of a social engineering technique known as spear phishing. This makes the email to appear to come from a trusted source. Another popular vulnerability is an improperly protected Remote Desktop Protocol port.

CryptoLocker ushered in the new age of crypto-ransomware in 2013, and the damage caused by different versions of ransomware is estimated at billions of dollars annually, roughly doubling every other year. Notorious examples are Locky, and Petya. Recent headline variants like Ryuk, DoppelPaymer and CryptoWall are more sophisticated and have wreaked more damage than older versions. Even if your backup/recovery processes allow your business to restore your encrypted files, you can still be hurt by so-called exfiltration, where ransomed data are exposed to the public. Because new variants of ransomware crop up every day, there is no certainty that traditional signature-matching anti-virus tools will block a new attack. If threat does appear in an email, it is important that your end users have learned to be aware of phishing tricks. Your last line of protection is a sound process for scheduling and keeping offsite backups plus the deployment of reliable recovery tools.

Ask Progent About the ProSight Crypto-Ransomware Preparedness Audit in Memphis
For pricing details and to find out more about how Progent's ProSight Crypto-Ransomware Readiness Assessment can enhance your protection against ransomware in Memphis, call Progent at 800-462-8800 or see Contact Progent.