Addison Ransomware Defense and Remediation Consulting
Ransomware Readiness Checkup
Ransomware has been weaponized by cyber extortionists and rogue states, posing a possibly existential risk to companies that are victimized. Modern versions of ransomware target all vulnerable resources, including backup, making even selective recovery a long and costly exercise. New versions of ransomware like Ryuk, Maze, Sodinokibi, Netwalker, Phobos, Conti and Egregor have made the headlines, replacing Locky, Spora, and Petya in prominence, sophistication, and destructive impact.
Most ransomware breaches are caused by innocuous-seeming emails that have malicious links or file attachments, and a high percentage are "zero-day" attacks that can escape detection by legacy signature-matching antivirus (AV) tools. Although user training and frontline detection are important to defend your network against ransomware, leading practices demand that you assume some attacks will inevitably get through and that you put in place a strong backup solution that permits you to repair the damage rapidly with little if any losses.
Progent's ProSight Ransomware Vulnerability Checkup is an ultra-affordable service built around an online discussion with a Progent security consultant skilled in ransomware protection and recovery. During this interview Progent will collaborate directly with your Addison network management staff to collect critical information concerning your cybersecurity configuration and backup processes. Progent will use this information to produce a Basic Security and Best Practices Assessment documenting how to adhere to leading practices for implementing and managing your security and backup systems to block or recover from a ransomware assault.
Progent's Basic Security and Best Practices Assessment highlights vital areas related to ransomware prevention and restoration recovery. The review covers:
Security
- Proper allocation and use of admin accounts
- Correct NTFS and SMB permissions
- Proper firewall configuration
- Safe Remote Desktop Protocol access
- Guidance for AntiVirus (AV) filtering identification and deployment
- Split permission architecture for backup protection
- Protecting critical servers such as AD
- Geographically dispersed backups including cloud backup to Azure
About Ransomware
Ransomware is a form of malware that encrypts or steals a victim's files so they cannot be used or are publicized. Ransomware sometimes locks the victim's computer. To prevent the carnage, the victim is asked to send a certain ransom, usually via a crypto currency such as Bitcoin, within a short time window. It is never certain that delivering the ransom will recover the damaged data or prevent its exposure to the public. Files can be encrypted or erased across a network based on the target's write permissions, and you cannot break the strong encryption technologies used on the compromised files. A typical ransomware attack vector is tainted email, whereby the victim is tricked into interacting with by means of a social engineering technique called spear phishing. This causes the email message to appear to come from a familiar sender. Another common attack vector is an improperly protected Remote Desktop Protocol port.
CryptoLocker opened the modern era of crypto-ransomware in 2013, and the damage caused by different strains of ransomware is estimated at billions of dollars per year, more than doubling every other year. Famous examples include Locky, and NotPetya. Recent high-profile variants like Ryuk, Sodinokibi and Spora are more complex and have wreaked more damage than earlier versions. Even if your backup processes permit your business to recover your encrypted files, you can still be threatened by exfiltration, where ransomed documents are exposed to the public. Because additional variants of ransomware are launched daily, there is no guarantee that traditional signature-based anti-virus tools will detect the latest attack. If an attack does show up in an email, it is critical that your users have been taught to be aware of social engineering techniques. Your ultimate protection is a sound scheme for scheduling and retaining remote backups plus the deployment of dependable restoration tools.
Ask Progent About the ProSight Ransomware Vulnerability Assessment in Addison
For pricing details and to find out more about how Progent's ProSight Crypto-Ransomware Susceptibility Assessment can bolster your protection against crypto-ransomware in Addison, phone Progent at
Select Topic: