Lakeland Ransomware Filtering and Remediation Expertise

Ransomware has become the weapon of choice for the major cyber-crime organizations and bad-actor governments, posing a possibly lethal risk to businesses that are victimized. Current variations of crypto-ransomware go after everything, including backup, making even selective restoration a long and expensive process. New variations of crypto-ransomware such as Ryuk, Maze, Sodinokibi, Netwalker, Phobos, Snatch and Nephilim have made the headlines, displacing WannaCry, TeslaCrypt, and Petya in prominence, sophistication, and destructiveness.

90% of crypto-ransomware penetrations come from innocent-looking emails that have malicious hyperlinks or file attachments, and a high percentage are "zero-day" attacks that elude the defenses of legacy signature-based antivirus (AV) filters. Although user education and frontline identification are important to protect your network against ransomware attacks, leading practices demand that you expect that some attacks will inevitably get through and that you put in place a solid backup mechanism that allows you to repair the damage quickly with minimal losses.

Progent's ProSight Ransomware Vulnerability Checkup is an ultra-affordable service centered around a remote discussion with a Progent security consultant skilled in ransomware protection and repair. During this interview Progent will cooperate with your Lakeland network management staff to gather critical information concerning your cybersecurity profile and backup processes. Progent will utilize this information to produce a Basic Security and Best Practices Report detailing how to follow leading practices for implementing and administering your cybersecurity and backup solution to prevent or recover from a crypto-ransomware attack.

Progent's Basic Security and Best Practices Assessment focuses on vital issues associated with ransomware defense and restoration recovery. The review covers:

Security

• Effective use of administration accounts
• Appropriate NTFS (New Technology File System) and SMB permissions
• Optimal firewall settings
• Safe Remote Desktop Protocol access
• Advice about AntiVirus (AV) filtering identification and configuration

• Split permission model for backup integrity
• Protecting key servers such as Active Directory
• Geographically dispersed backups with cloud backup to Microsoft Azure

About Ransomware
Ransomware is a form of malicious software that encrypts or deletes a victim's files so they are unusable or are made publicly available. Ransomware often locks the victim's computer. To prevent the damage, the victim is asked to send a certain amount of money (the ransom), usually in the form of a crypto currency like Bitcoin, within a brief period of time. It is not guaranteed that paying the extortion price will recover the damaged data or prevent its publication. Files can be encrypted or erased throughout a network based on the victim's write permissions, and you cannot reverse engineer the military-grade encryption technologies used on the compromised files. A typical ransomware delivery package is booby-trapped email, in which the victim is tricked into interacting with by means of a social engineering technique known as spear phishing. This makes the email to look as though it came from a familiar source. Another common vulnerability is a poorly protected Remote Desktop Protocol port.

The ransomware variant CryptoLocker opened the modern era of crypto-ransomware in 2013, and the damage caused by different versions of ransomware is estimated at billions of dollars per year, more than doubling every other year. Notorious examples include Locky, and NotPetya. Current high-profile threats like Ryuk, Maze and Spora are more complex and have wreaked more havoc than earlier versions. Even if your backup processes permit you to restore your encrypted data, you can still be hurt by so-called exfiltration, where stolen documents are exposed to the public (known as "doxxing"). Because new variants of ransomware crop up every day, there is no guarantee that conventional signature-matching anti-virus tools will detect a new attack. If threat does appear in an email, it is critical that your users have learned to be aware of phishing tricks. Your ultimate protection is a sound scheme for scheduling and keeping offsite backups plus the use of reliable restoration platforms.

Ask Progent About the ProSight Crypto-Ransomware Susceptibility Assessment in Lakeland
For pricing details and to learn more about how Progent's ProSight Crypto-Ransomware Readiness Testing can enhance your defense against crypto-ransomware in Lakeland, phone Progent at 800-462-8800 or see Contact Progent.