Barra da Tijuca Ransomware Protection and Remediation Solutions

Ransomware has become the weapon of choice for cyber extortionists and rogue states, posing a possibly existential threat to companies that fall victim. Modern strains of crypto-ransomware target everything, including online backup, making even selective recovery a long and expensive process. Novel strains of crypto-ransomware like Ryuk, Maze, Sodinokibi, Mailto (aka Netwalker), DopplePaymer, Conti and Egregor have emerged, replacing WannaCry, Spora, and NotPetya in prominence, sophistication, and destructive impact.

90% of ransomware penetrations are the result of innocuous-looking emails with dangerous hyperlinks or file attachments, and many are so-called "zero-day" attacks that can escape detection by traditional signature-matching antivirus (AV) tools. Although user training and frontline detection are critical to defend your network against ransomware attacks, leading practices demand that you assume some malware will eventually get through and that you deploy a strong backup mechanism that allows you to repair the damage quickly with minimal losses.

Progent's ProSight Ransomware Preparedness Report is a low-cost service centered around an online interview with a Progent cybersecurity consultant experienced in ransomware defense and repair. During this assessment Progent will work with your Barra da Tijuca network managers to collect critical information about your cybersecurity setup and backup environment. Progent will utilize this data to create a Basic Security and Best Practices Report documenting how to apply best practices for configuring and managing your security and backup systems to prevent or recover from a ransomware assault.

Progent's Basic Security and Best Practices Report focuses on vital issues related to ransomware defense and restoration recovery. The report addresses:

Security

• Proper use of admin accounts
• Correct NTFS (New Technology File System) and SMB permissions
• Optimal firewall setup
• Safe Remote Desktop Protocol (RDP) connections
• Guidance for AntiVirus (AV) filtering selection and configuration

• Split permission model for backup integrity
• Protecting required servers such as Active Directory
• Offsite backups including cloud backup to Azure

About Ransomware
Ransomware is a variety of malicious software that encrypts or steals files so they are unusable or are made publicly available. Ransomware often locks the target's computer. To avoid the carnage, the target is required to send a certain ransom, typically via a crypto currency like Bitcoin, within a short time window. It is not guaranteed that paying the ransom will restore the damaged files or prevent its exposure to the public. Files can be encrypted or deleted throughout a network depending on the target's write permissions, and you cannot solve the strong encryption technologies used on the compromised files. A common ransomware delivery package is booby-trapped email, whereby the target is lured into interacting with by means of a social engineering technique called spear phishing. This makes the email to appear to come from a trusted source. Another popular attack vector is a poorly protected RDP port.

CryptoLocker ushered in the modern era of ransomware in 2013, and the damage caused by the many strains of ransomware is estimated at billions of dollars per year, more than doubling every two years. Notorious examples are Locky, and NotPetya. Recent high-profile threats like Ryuk, DoppelPaymer and Cerber are more elaborate and have wreaked more damage than earlier versions. Even if your backup procedures allow your business to restore your encrypted data, you can still be hurt by so-called exfiltration, where ransomed documents are exposed to the public (known as "doxxing"). Because additional variants of ransomware crop up daily, there is no certainty that traditional signature-matching anti-virus filters will block the latest attack. If threat does show up in an email, it is critical that your end users have been taught to identify phishing tricks. Your ultimate defense is a solid process for performing and keeping remote backups and the deployment of dependable recovery platforms.

Contact Progent About the ProSight Ransomware Readiness Audit in Barra da Tijuca
For pricing information and to learn more about how Progent's ProSight Crypto-Ransomware Preparedness Checkup can enhance your protection against ransomware in Barra da Tijuca, call Progent at 800-462-8800 or visit Contact Progent.