A major drug manufacturing company was targeted by ransomware that encrypted their files and demanded ransom payment. They approached Nuvento for help recovering the encrypted files within 3-4 days. Nuvento deployed multiple teams to cleanse the network of ransomware, remove vulnerabilities, and safeguard the company's data from further breaches. This included installing antivirus software, conducting threat hunting and vulnerability assessments, and making recommendations to upgrade systems and security measures.

1. Cybersecurity
Solution for a Drug
Manufacturing
Company

2. A major drug manufacturing company in the
United States was targeted by ransomware.
Cyber attackers encrypted their files and
demanded a ransom to decrypt them. The
company refused to pay the ransom or accept
any solution from them.

3. The drug manufacturing company approached
Nuvento for a 3-4 day action plan to recover the
encrypted files in their system. They wanted us to
resolve the problem and prevent similar incidents
from happening again.

4. The challenge for Nuvento was to find and
remove the ransomware from their network.
To investigate the situation and identify a
viable solution, we deployed our Threat
Hunting team, Vulnerability Assessment
team, Cybersecurity team, and IT
Infrastructure Support team.
The Challenge

5. We cleansed the entire network, removed the
ransomware, and safeguarded their data
from further cybersecurity breaches.
Following were the measures taken:
Our Solution
Install Antivirus Protection
Threat Hunting
Vulnerability Assessment

6. We discovered that some systems had anti-
virus software that was outdated, while
others had no antivirus protection at all.
The first line of defence against the cyber-
attack was to install standard antivirus
software on all systems. As a result, we
used standard antivirus software to protect
each and every system
Install Antivirus
Protection;

7. For threat hunting, Nuvento installed the threat
detection software Infocyte.
We discovered some suspicious logs while running
Infocyte. Our team notified the company
about the infected systems, quarantined them,
cleaned them, and reconnected them to their
network.
Threat Hunting;

8. We conducted vulnerability assessments using
Tenable, a leading vulnerability management
solution. Unsupported systems, open ports, out-
of-date software, plugins, and web browsers
were among the vulnerabilities discovered.
Vulnerability
Assessment;

9. Based on the vulnerability
assessments, Nuvento made the
following recommendations:
Upgrade their systems to the latest Windows
versions
Change their Windows user accounts and
service accounts permissions
Upgrade firewall
Use third-party service providers to protect
from DDoS attacks
Continue using InfoCyte to get malware alerts
in their network

10. Contact our team.
When you contact our technology leaders, they
will evaluate your specific business case and
share a proof of concept with cost estimates,
technology and developer effort requirements,
and a timeline for the process.
www.nuvento.com