San Mateo Ransomware Protection and Remediation Consulting

Ransomware has been weaponized by the major cyber-crime organizations and malicious governments, posing a possibly existential threat to companies that are breached. Modern versions of ransomware target all vulnerable resources, including online backup, making even partial recovery a long and costly exercise. New versions of ransomware such as Ryuk, Maze, Sodinokibi, Mailto (aka Netwalker), DopplePaymer, LockBit and Nephilim have made the headlines, replacing Locky, Spora, and Petya in notoriety, elaborateness, and destructiveness.

90% of ransomware penetrations are caused by innocent-looking emails with dangerous hyperlinks or attachments, and a high percentage are so-called "zero-day" attacks that can escape detection by legacy signature-based antivirus tools. While user education and up-front detection are important to defend against ransomware, best practices demand that you take for granted some attacks will eventually get through and that you prepare a strong backup solution that permits you to recover quickly with minimal losses.

Progent's ProSight Ransomware Vulnerability Report is an ultra-affordable service built around an online interview with a Progent cybersecurity consultant skilled in ransomware defense and repair. In the course of this interview Progent will cooperate with your San Mateo network managers to collect pertinent information concerning your security profile and backup processes. Progent will use this data to produce a Basic Security and Best Practices Report detailing how to apply best practices for implementing and administering your cybersecurity and backup systems to prevent or clean up after a crypto-ransomware assault.

Progent's Basic Security and Best Practices Assessment focuses on vital issues related to ransomware defense and restoration recovery. The report addresses:

Cybersecurity

• Correct allocation and use of admin accounts
• Correct NTFS and SMB permissions
• Proper firewall setup
• Safe Remote Desktop Protocol (RDP) configuration
• Advice about AntiVirus filtering identification and deployment

• Split permission model for backup protection
• Backing up critical servers including AD
• Offsite backups including cloud backup to Azure

About Ransomware
Ransomware is a variety of malicious software that encrypts or deletes a victim's files so they are unusable or are made publicly available. Crypto-ransomware sometimes locks the target's computer. To prevent the carnage, the target is asked to pay a specified ransom, typically via a crypto currency such as Bitcoin, within a short period of time. It is not guaranteed that paying the extortion price will recover the lost data or avoid its publication. Files can be altered or deleted across a network based on the target's write permissions, and you cannot solve the strong encryption algorithms used on the compromised files. A common ransomware attack vector is tainted email, whereby the victim is tricked into responding to by a social engineering technique called spear phishing. This causes the email to appear to come from a trusted sender. Another popular vulnerability is an improperly protected Remote Desktop Protocol port.

CryptoLocker opened the new age of ransomware in 2013, and the damage caused by different versions of ransomware is said to be billions of dollars per year, more than doubling every two years. Famous attacks include Locky, and Petya. Recent headline threats like Ryuk, Maze and Cerber are more sophisticated and have caused more havoc than older versions. Even if your backup processes permit your business to recover your encrypted files, you can still be hurt by so-called exfiltration, where stolen data are exposed to the public. Because new versions of ransomware crop up every day, there is no certainty that conventional signature-matching anti-virus tools will block a new attack. If an attack does show up in an email, it is important that your users have been taught to be aware of phishing tricks. Your ultimate protection is a solid scheme for performing and keeping offsite backups and the deployment of reliable recovery platforms.

Ask Progent About the ProSight Ransomware Readiness Report in San Mateo
For pricing details and to find out more about how Progent's ProSight Crypto-Ransomware Readiness Audit can bolster your defense against crypto-ransomware in San Mateo, phone Progent at 800-462-8800 or visit Contact Progent.