Vancouver Ransomware Prevention and Remediation Expertise
Ransomware Susceptibility Audit
Ransomware has become the weapon of choice for the major cyber-crime organizations and rogue governments, representing a potentially existential threat to companies that fall victim. Modern versions of crypto-ransomware go after all vulnerable resources, including backup, making even partial recovery a long and costly process. New variations of ransomware such as Ryuk, Maze, Sodinokibi, Mailto (aka Netwalker), Phobos, LockBit and Nephilim have made the headlines, displacing Locky, Spora, and Petya in prominence, elaborateness, and destructiveness.
90% of crypto-ransomware penetrations come from innocent-seeming emails with malicious hyperlinks or file attachments, and many are "zero-day" strains that elude detection by legacy signature-based antivirus (AV) filters. Although user training and frontline detection are important to defend your network against ransomware, leading practices demand that you assume some attacks will eventually get through and that you deploy a strong backup mechanism that allows you to recover rapidly with little if any losses.
Progent's ProSight Ransomware Vulnerability Report is a low-cost service built around a remote interview with a Progent cybersecurity expert skilled in ransomware defense and recovery. During this interview Progent will work directly with your Vancouver network managers to gather pertinent data concerning your cybersecurity setup and backup processes. Progent will use this data to generate a Basic Security and Best Practices Report detailing how to follow leading practices for configuring and administering your security and backup solution to prevent or recover from a ransomware attack.
Progent's Basic Security and Best Practices Assessment focuses on vital areas related to ransomware prevention and restoration recovery. The report addresses:
Cybersecurity
- Proper use of administration accounts
- Appropriate NTFS (New Technology File System) and SMB permissions
- Proper firewall settings
- Safe Remote Desktop Protocol connections
- Recommend AntiVirus filtering selection and configuration
- Split permission model for backup integrity
- Backing up critical servers such as AD
- Geographically dispersed backups including cloud backup to Azure
About Ransomware
Ransomware is a form of malicious software that encrypts or steals files so they are unusable or are publicized. Ransomware sometimes locks the victim's computer. To avoid the carnage, the victim is required to send a specified amount of money (the ransom), typically via a crypto currency like Bitcoin, within a short period of time. It is not guaranteed that delivering the extortion price will recover the lost data or avoid its publication. Files can be altered or erased throughout a network depending on the victim's write permissions, and you cannot reverse engineer the military-grade encryption technologies used on the compromised files. A common ransomware delivery package is tainted email, in which the target is lured into interacting with by a social engineering technique known as spear phishing. This makes the email to appear to come from a familiar sender. Another common attack vector is a poorly protected Remote Desktop Protocol port.
The ransomware variant CryptoLocker ushered in the new age of crypto-ransomware in 2013, and the damage caused by different strains of ransomware is said to be billions of dollars per year, roughly doubling every other year. Notorious examples are WannaCry, and NotPetya. Recent high-profile variants like Ryuk, Sodinokibi and TeslaCrypt are more complex and have wreaked more havoc than older strains. Even if your backup processes enable your business to restore your encrypted data, you can still be hurt by exfiltration, where ransomed documents are exposed to the public. Because additional versions of ransomware crop up daily, there is no guarantee that traditional signature-based anti-virus filters will block a new malware. If threat does appear in an email, it is critical that your end users have learned to identify phishing techniques. Your ultimate defense is a sound scheme for scheduling and retaining offsite backups plus the deployment of reliable recovery platforms.
Contact Progent About the ProSight Crypto-Ransomware Readiness Report in Vancouver
For pricing details and to find out more about how Progent's ProSight Ransomware Susceptibility Report can enhance your defense against crypto-ransomware in Vancouver, phone Progent at
Select Topic: