Salt Lake City Ransomware Protection and Recovery Services

Ransomware has become the weapon of choice for cybercriminals and bad-actor states, posing a potentially lethal threat to companies that fall victim. The latest variations of ransomware target all vulnerable resources, including online backup, making even selective restoration a challenging and costly exercise. New versions of ransomware such as Ryuk, Maze, Sodinokibi, Mailto (aka Netwalker), Phobos, Snatch and Egregor have emerged, replacing Locky, Spora, and Petya in notoriety, elaborateness, and destructiveness.

90% of ransomware breaches are the result of innocent-looking emails that include dangerous hyperlinks or attachments, and many are so-called "zero-day" variants that can escape detection by legacy signature-based antivirus (AV) filters. Although user training and up-front identification are critical to protect against ransomware attacks, leading practices demand that you expect that some attacks will inevitably get through and that you put in place a solid backup solution that permits you to recover rapidly with minimal damage.

Progent's ProSight Ransomware Vulnerability Assessment is an ultra-affordable service centered around a remote discussion with a Progent cybersecurity consultant experienced in ransomware protection and recovery. In the course of this interview Progent will collaborate directly with your Salt Lake City IT management staff to collect critical data concerning your cybersecurity profile and backup processes. Progent will utilize this data to generate a Basic Security and Best Practices Report documenting how to apply best practices for implementing and administering your security and backup solution to block or clean up after a crypto-ransomware assault.

Progent's Basic Security and Best Practices Report focuses on key issues related to crypto-ransomware defense and restoration recovery. The report covers:

Cybersecurity

• Effective allocation and use of administration accounts
• Appropriate NTFS (New Technology File System) and SMB authorizations
• Optimal firewall setup
• Safe Remote Desktop Protocol (RDP) configuration
• Guidance for AntiVirus filtering selection and deployment

• Split permission architecture for backup integrity
• Backing up required servers such as AD
• Offsite backups with cloud backup to Microsoft Azure

About Ransomware
Ransomware is a variety of malware that encrypts or steals files so they cannot be used or are made publicly available. Ransomware sometimes locks the victim's computer. To prevent the carnage, the target is asked to pay a certain ransom, typically via a crypto currency such as Bitcoin, within a brief period of time. It is never certain that delivering the ransom will recover the damaged data or avoid its exposure to the public. Files can be encrypted or erased across a network based on the target's write permissions, and you cannot reverse engineer the strong encryption technologies used on the hostage files. A common ransomware delivery package is booby-trapped email, whereby the user is lured into interacting with by means of a social engineering technique known as spear phishing. This makes the email to appear to come from a trusted source. Another common attack vector is a poorly secured Remote Desktop Protocol (RDP) port.

The ransomware variant CryptoLocker opened the new age of ransomware in 2013, and the monetary losses caused by different strains of ransomware is said to be billions of dollars annually, more than doubling every two years. Famous examples are WannaCry, and NotPetya. Current headline variants like Ryuk, DoppelPaymer and CryptoWall are more elaborate and have wreaked more havoc than older versions. Even if your backup/recovery processes enable your business to recover your ransomed files, you can still be threatened by so-called exfiltration, where stolen data are made public. Because new variants of ransomware are launched daily, there is no guarantee that traditional signature-matching anti-virus filters will detect a new attack. If an attack does appear in an email, it is important that your users have learned to be aware of social engineering tricks. Your ultimate protection is a solid scheme for performing and retaining remote backups plus the deployment of dependable recovery platforms.

Ask Progent About the ProSight Crypto-Ransomware Readiness Testing in Salt Lake City
For pricing details and to find out more about how Progent's ProSight Ransomware Susceptibility Checkup can enhance your defense against crypto-ransomware in Salt Lake City, call Progent at 800-462-8800 or see Contact Progent.