Seattle Ransomware Filtering and Cleanup Services

Ransomware has become the weapon of choice for cybercriminals and bad-actor states, representing a possibly lethal threat to businesses that are successfully attacked. The latest versions of ransomware target everything, including online backup, making even partial recovery a complex and costly process. New versions of ransomware such as Ryuk, Maze, Sodinokibi, Netwalker, Phobos, Conti and Nephilim have emerged, displacing WannaCry, Cerber, and Petya in prominence, elaborateness, and destructive impact.

Most ransomware penetrations are caused by innocuous-seeming emails with malicious hyperlinks or file attachments, and a high percentage are so-called "zero-day" attacks that can escape detection by traditional signature-based antivirus filters. While user training and up-front detection are critical to defend against ransomware attacks, leading practices demand that you assume some attacks will eventually succeed and that you put in place a solid backup mechanism that enables you to recover quickly with minimal damage.

Progent's ProSight Ransomware Vulnerability Report is a low-cost service centered around an online interview with a Progent cybersecurity consultant skilled in ransomware protection and repair. During this interview Progent will collaborate directly with your Seattle network management staff to collect pertinent information about your cybersecurity configuration and backup environment. Progent will utilize this information to create a Basic Security and Best Practices Assessment detailing how to adhere to leading practices for implementing and managing your security and backup solution to prevent or clean up after a crypto-ransomware assault.

Progent's Basic Security and Best Practices Assessment highlights vital issues related to crypto-ransomware prevention and restoration recovery. The report addresses:

Cybersecurity

• Proper allocation and use of administration accounts
• Appropriate NTFS (New Technology File System) and SMB (Server Message Block) permissions
• Optimal firewall configuration
• Safe Remote Desktop Protocol configuration
• Guidance for AntiVirus tools selection and deployment

• Split permission model for backup protection
• Backing up key servers including Active Directory
• Geographically dispersed backups including cloud backup to Azure

About Ransomware
Ransomware is a form of malicious software that encrypts or deletes a victim's files so they are unusable or are made publicly available. Crypto-ransomware often locks the victim's computer. To avoid the carnage, the target is required to pay a specified amount of money (the ransom), typically via a crypto currency like Bitcoin, within a short time window. It is never certain that paying the ransom will restore the damaged data or avoid its publication. Files can be encrypted or deleted across a network depending on the victim's write permissions, and you cannot reverse engineer the strong encryption technologies used on the hostage files. A typical ransomware attack vector is booby-trapped email, whereby the user is tricked into interacting with by means of a social engineering exploit called spear phishing. This makes the email message to appear to come from a trusted source. Another popular attack vector is a poorly secured Remote Desktop Protocol (RDP) port.

CryptoLocker ushered in the modern era of crypto-ransomware in 2013, and the damage attributed to by the many versions of ransomware is said to be billions of dollars per year, more than doubling every two years. Notorious examples are Locky, and Petya. Recent headline variants like Ryuk, Maze and CryptoWall are more sophisticated and have wreaked more havoc than earlier versions. Even if your backup/recovery procedures permit you to restore your ransomed files, you can still be hurt by exfiltration, where stolen data are exposed to the public (known as "doxxing"). Because additional versions of ransomware crop up every day, there is no guarantee that traditional signature-based anti-virus tools will detect the latest attack. If an attack does appear in an email, it is critical that your end users have learned to be aware of social engineering techniques. Your last line of protection is a solid process for performing and keeping remote backups and the deployment of reliable restoration platforms.

Ask Progent About the ProSight Crypto-Ransomware Readiness Evaluation in Seattle
For pricing details and to find out more about how Progent's ProSight Crypto-Ransomware Preparedness Consultation can bolster your protection against crypto-ransomware in Seattle, phone Progent at 800-462-8800 or visit Contact Progent.