Tucson Ransomware Filtering and Restoration Expertise

Ransomware has become the weapon of choice for cybercriminals and malicious governments, posing a potentially existential threat to companies that are successfully attacked. The latest versions of crypto-ransomware go after everything, including online backup, making even partial restoration a long and costly exercise. Novel variations of ransomware such as Ryuk, Maze, Sodinokibi, Netwalker, Phobos, Snatch and Egregor have emerged, replacing WannaCry, Cerber, and CryptoWall in prominence, elaborateness, and destructive impact.

90% of crypto-ransomware breaches are the result of innocuous-seeming emails that have dangerous hyperlinks or file attachments, and many are so-called "zero-day" attacks that elude the defenses of legacy signature-matching antivirus filters. Although user training and frontline detection are important to protect your network against ransomware attacks, leading practices dictate that you take for granted some attacks will eventually get through and that you deploy a solid backup mechanism that enables you to restore files and services rapidly with minimal damage.

Progent's ProSight Ransomware Vulnerability Assessment is a low-cost service built around a remote discussion with a Progent security expert skilled in ransomware defense and recovery. During this assessment Progent will collaborate directly with your Tucson network managers to gather critical information concerning your cybersecurity profile and backup processes. Progent will use this data to generate a Basic Security and Best Practices Report documenting how to adhere to leading practices for implementing and administering your cybersecurity and backup solution to prevent or recover from a ransomware attack.

Progent's Basic Security and Best Practices Report highlights vital issues related to ransomware defense and restoration recovery. The report addresses:

Cybersecurity

• Proper use of admin accounts
• Assigning NTFS (New Technology File System) and SMB (Server Message Block) authorizations
• Proper firewall configuration
• Safe Remote Desktop Protocol (RDP) access
• Recommend AntiVirus (AV) tools identification and configuration

• Split permission architecture for backup protection
• Backing up critical servers including AD
• Offsite backups including cloud backup to Azure

About Ransomware
Ransomware is a type of malware that encrypts or steals files so they are unusable or are made publicly available. Ransomware sometimes locks the target's computer. To prevent the carnage, the victim is asked to pay a certain amount of money (the ransom), typically in the form of a crypto currency like Bitcoin, within a brief period of time. It is never certain that paying the extortion price will recover the damaged files or prevent its exposure to the public. Files can be altered or deleted across a network depending on the victim's write permissions, and you cannot solve the military-grade encryption technologies used on the compromised files. A common ransomware attack vector is booby-trapped email, in which the target is tricked into responding to by a social engineering exploit known as spear phishing. This makes the email to appear to come from a trusted sender. Another popular attack vector is a poorly protected RDP port.

CryptoLocker ushered in the new age of crypto-ransomware in 2013, and the damage caused by different versions of ransomware is estimated at billions of dollars per year, roughly doubling every other year. Notorious attacks are WannaCry, and NotPetya. Recent headline variants like Ryuk, Maze and Spora are more elaborate and have caused more damage than older versions. Even if your backup/recovery procedures permit you to recover your ransomed files, you can still be threatened by exfiltration, where stolen documents are exposed to the public (known as "doxxing"). Because new variants of ransomware crop up every day, there is no certainty that traditional signature-matching anti-virus filters will detect the latest malware. If threat does show up in an email, it is critical that your users have been taught to identify phishing tricks. Your ultimate defense is a solid scheme for performing and retaining offsite backups and the use of dependable recovery platforms.

Ask Progent About the ProSight Crypto-Ransomware Readiness Audit in Tucson
For pricing details and to find out more about how Progent's ProSight Ransomware Readiness Checkup can enhance your protection against ransomware in Tucson, phone Progent at 800-462-8800 or see Contact Progent.