Sababa Security and Kaspersky Rescue Rangers

Sababa Security in partnership with Kaspersky and by leveraging on some of their technologies and intelligence capabilities provides free incident response service to Italian companies in case of cyber security incidents.

The pandemic made businesses adapt, pushing as many of their activities online as possible. Salespeople virtually meet clients in their living rooms, marketing teams arrange online events on their balconies, while back offices have occupied kitchens.

To ensure business continuity, that is a key priority now, companies allow employees to use their personal devices, home routers and any kind of software that can help them stay productive. These extreme measures are often insecure. Only 53% of companies are reported to use VPN to connect to corporate resources, while not more than 23% of employees took security awareness training.

It takes time and resources to make remote work cyber safe. Meanwhile cybercriminals do their best to take advantage of the moment, exploiting COVID-19 and other topics in cyber-attack attempts. As a result, the number of cyber security incidents rapidly grows.

When is it time to worry?

Any of the following “symptoms” can be signs of a cyber-attack going on:

• unauthorized configuration changes
• unusual behavior of highly privileged accounts
• unknown or unusual file names
• suspicious content or out-of-the-ordinary e-mails
• brute force attempts
• above average or unexpected network traffic
• changes in application or system file executables
• warning from security systems (IDS / IPS, EDR, SIEM, etc.)
• host or BSOD reboots
• unauthorized use of the corporate system

If you notice suspicious behavior on your organization’s network, that your colleagues, users, or suppliers are unable to explain – sound the alarm.

In the trouble times we help for free

Sababa Security in partnership with Kaspersky and by leveraging on some of their technologies and intelligence capabilities will help you contain a cyber-attack and bring your business back to work. Our professionals gain practical experience across diverse IT environments and are ready to help companies of any size and vertical. We conduct a free initial incident evaluation to check if your network is compromised and make a remediation plan for you.

We start the incident evaluation with an interview with your technical representative, where we collect initial information on the evidence of a possible violation. After the analysis of the data we define a communication and investigation plan. If required, we collect some additional evidence like access logs and security events for further analysis. Finally, we prepare a document, that confirms the incident and provides guidelines on the threat isolation and prevention of its further spread.  

Depending on whether you have your own incident response team or not, and based on the outcome of the initial investigation, you can request a full Incident Response as well as Malware Analysis and Digital Forensics paid services.

To request the free incident evaluation, simply provide a detailed description of the suspicious events or cyber security incidents here and we will contact you straight away. The offer is valid until the end of June 2020.