Edison Ransomware Defense and Recovery Services
Ransomware Susceptibility Testing
Ransomware has become the weapon of choice for cyber extortionists and rogue governments, representing a potentially existential risk to businesses that are successfully attacked. The latest variations of crypto-ransomware target all vulnerable resources, including backup, making even selective restoration a challenging and costly process. New versions of crypto-ransomware like Ryuk, Maze, Sodinokibi, Netwalker, Phobos, LockBit and Egregor have made the headlines, replacing Locky, Spora, and NotPetya in notoriety, elaborateness, and destructive impact.
Most ransomware infections are caused by innocuous-looking emails that include malicious hyperlinks or file attachments, and a high percentage are "zero-day" strains that can escape detection by traditional signature-based antivirus (AV) filters. While user training and up-front detection are important to protect against ransomware, leading practices dictate that you take for granted some malware will eventually get through and that you deploy a strong backup mechanism that allows you to recover rapidly with minimal losses.
Progent's ProSight Ransomware Preparedness Report is a low-cost service centered around a remote discussion with a Progent security consultant skilled in ransomware defense and recovery. During this assessment Progent will collaborate directly with your Edison network managers to gather pertinent information about your security profile and backup environment. Progent will use this data to create a Basic Security and Best Practices Report detailing how to apply best practices for configuring and administering your security and backup systems to block or recover from a crypto-ransomware attack.
Progent's Basic Security and Best Practices Report highlights vital areas related to ransomware prevention and restoration recovery. The review addresses:
Security
- Correct allocation and use of admin accounts
- Appropriate NTFS (New Technology File System) and SMB permissions
- Optimal firewall configuration
- Safe RDP configuration
- Recommend AntiVirus (AV) filtering identification and configuration
- Split permission architecture for backup protection
- Protecting required servers such as AD
- Offsite backups including cloud backup to Azure
About Ransomware
Ransomware is a form of malicious software that encrypts or deletes a victim's files so they cannot be used or are publicized. Crypto-ransomware sometimes locks the victim's computer. To prevent the damage, the target is required to send a specified amount of money (the ransom), typically in the form of a crypto currency like Bitcoin, within a short period of time. It is not guaranteed that delivering the ransom will recover the lost data or prevent its publication. Files can be altered or deleted throughout a network based on the target's write permissions, and you cannot reverse engineer the strong encryption algorithms used on the hostage files. A common ransomware delivery package is tainted email, in which the user is tricked into interacting with by means of a social engineering exploit called spear phishing. This makes the email to appear to come from a trusted source. Another popular attack vector is an improperly protected Remote Desktop Protocol port.
CryptoLocker opened the new age of crypto-ransomware in 2013, and the monetary losses caused by different versions of ransomware is estimated at billions of dollars annually, roughly doubling every other year. Famous attacks include WannaCry, and Petya. Current headline variants like Ryuk, Sodinokibi and TeslaCrypt are more sophisticated and have caused more damage than earlier strains. Even if your backup processes enable you to recover your encrypted data, you can still be threatened by exfiltration, where ransomed documents are made public (known as "doxxing"). Because additional variants of ransomware are launched every day, there is no certainty that traditional signature-matching anti-virus tools will block the latest malware. If an attack does show up in an email, it is critical that your end users have been taught to identify phishing techniques. Your ultimate protection is a solid process for performing and keeping remote backups plus the use of dependable recovery platforms.
Contact Progent About the ProSight Crypto-Ransomware Readiness Evaluation in Edison
For pricing details and to learn more about how Progent's ProSight Ransomware Readiness Report can bolster your protection against crypto-ransomware in Edison, call Progent at
Select Topic: