Phoenix Ransomware Prevention and Remediation Consulting
Ransomware Susceptibility Audit
Ransomware has become the weapon of choice for the major cyber-crime organizations and rogue states, representing a possibly lethal risk to companies that are successfully attacked. The latest variations of ransomware target all vulnerable resources, including online backup, making even selective restoration a long and costly exercise. Novel versions of crypto-ransomware such as Ryuk, Maze, Sodinokibi, Netwalker, DopplePaymer, Conti and Nephilim have made the headlines, replacing Locky, TeslaCrypt, and NotPetya in prominence, sophistication, and destructiveness.
90% of ransomware breaches are caused by innocuous-looking emails that have dangerous links or file attachments, and many are so-called "zero-day" strains that can escape detection by legacy signature-based antivirus filters. Although user education and up-front detection are critical to protect against ransomware attacks, best practices dictate that you expect that some malware will inevitably get through and that you deploy a strong backup solution that allows you to restore files and services rapidly with little if any losses.
Progent's ProSight Ransomware Preparedness Checkup is a low-cost service built around an online interview with a Progent cybersecurity expert experienced in ransomware protection and recovery. During this assessment Progent will cooperate directly with your Phoenix IT management staff to collect pertinent data concerning your cybersecurity configuration and backup environment. Progent will use this information to produce a Basic Security and Best Practices Report detailing how to adhere to leading practices for implementing and administering your security and backup solution to prevent or recover from a ransomware attack.
Progent's Basic Security and Best Practices Report highlights vital areas associated with crypto-ransomware defense and restoration recovery. The review covers:
Cybersecurity
- Correct use of admin accounts
- Appropriate NTFS and SMB authorizations
- Optimal firewall configuration
- Secure Remote Desktop Protocol (RDP) access
- Advice about AntiVirus filtering identification and configuration
- Split permission model for backup integrity
- Protecting key servers such as Active Directory
- Geographically dispersed backups with cloud backup to Azure
About Ransomware
Ransomware is a form of malicious software that encrypts or deletes a victim's files so they are unusable or are publicized. Crypto-ransomware often locks the victim's computer. To avoid the carnage, the target is asked to send a certain amount of money, typically via a crypto currency like Bitcoin, within a short period of time. It is never certain that paying the ransom will restore the lost files or avoid its exposure to the public. Files can be encrypted or deleted throughout a network based on the victim's write permissions, and you cannot break the strong encryption technologies used on the hostage files. A common ransomware delivery package is tainted email, whereby the user is lured into interacting with by a social engineering exploit known as spear phishing. This makes the email to appear to come from a familiar source. Another common attack vector is an improperly protected Remote Desktop Protocol port.
The ransomware variant CryptoLocker ushered in the new age of ransomware in 2013, and the monetary losses attributed to by different versions of ransomware is estimated at billions of dollars per year, more than doubling every other year. Famous attacks are WannaCry, and Petya. Current high-profile variants like Ryuk, Sodinokibi and Spora are more sophisticated and have wreaked more havoc than earlier versions. Even if your backup/recovery procedures permit your business to recover your encrypted data, you can still be hurt by so-called exfiltration, where ransomed documents are made public (known as "doxxing"). Because additional variants of ransomware are launched every day, there is no certainty that conventional signature-matching anti-virus tools will block the latest malware. If an attack does show up in an email, it is critical that your users have learned to identify social engineering techniques. Your ultimate protection is a solid process for performing and retaining offsite backups and the use of dependable recovery tools.
Contact Progent About the ProSight Ransomware Vulnerability Checkup in Phoenix
For pricing information and to find out more about how Progent's ProSight Ransomware Vulnerability Assessment can bolster your defense against ransomware in Phoenix, call Progent at
Select Topic: