Cybereason Anti Ransomware

RANSOMWARE IS HERE TO STAY

Ransomware attacks are more common this year. Attackers demand higher ransoms which could cost victims hundreds of thousands of dollars. Criminals targeted organizations such as the Hollywood Presbyterian Hospital, San Francisco Municipal Transportation Agency, and local governments as well as individuals. Ransomware isn’t discriminatory, in other words.

THE FAILURE OF ANTIVIRUS

Ransomware attacks are successful because traditional antivirus software can’t detect them. Every day new ransomware variants are created. Signature-based defenses cannot identify ransomware and protect organizations from it. Many ransomware types are polymorphic which means that it generates a new hash each time it spreads to avoid detection.

THE COMMON DENOMINATOR

Cybereason analyzed tens of thousands of ransomware variants from over 40 ransomware strains including Locky Cryptowall, TeslaCrypt Jigsaw, Cerber, and Jigsaw. They identified behavioral patterns that differentiate ransomware and legitimate applications. Although each ransomware variant was created by different criminal groups, they all display the same low-level file-related behaviors. Ransomware aims to encrypt as many files possible as fast as possible.

INTRODUCING RANSOM FREE

Cybereason developed a unique behavioral strategy to stop ransomware from taking control of files. We know the pattern of ransomware’s behavior and how it will begin encrypting files. RansomFree is a free anti-ransomware program that blocks ransomware.

Cybereason RansomFree targets the most common ransomware behavior and protects against 99 percent of ransomware variants. RansomFree detects ransomware and suspends it. It displays popup warning users about the danger to their files. Users can then stop the attack by clicking one button.

PROTECTION FROM RANSOMWARE ATTACKS

RansomFree protects both local encryption and the encryption of files on shared drives or network networks. One of the most dangerous scenarios an organization could face is the encryption of shared files. Ransomware can be executed by one network employee and affect the entire company.

RansomFree can catch both fileless and stand-alone ransomware. Fileless ransomware exploits legitimate Windows tools like JavaScript and PowerShell to accomplish its malicious intent. Stand-alone ransomware makes use of vulnerabilities in programs, such as buggy Flash code.

KEEP YOUR DATA SAFE

Ransomware doesn’t discriminate. Ransomware knows that some files are more valuable than others. Companies have spreadsheets full of sales data, while family vacation photos are treasured by many. While it is crucial to back up files, this may not be enough to protect an individual or organization from ransomware. Ransomware is a lucrative threat for adversaries and they won’t be able to eradicate it from their toolkit anytime soon.

RansomFree protects valuable data from criminals, such as a couple’s wedding photos and a company’s product roadmaps.