Adlumin enhances ransomware prevention with new exfiltration tool

Adlumin, a security operations platform, has introduced an enhanced Ransomware Prevention feature designed to quickly detect and halt ransomware activities. This new capability also includes the ability to stop data exfiltration, a technique often leveraged by ransomware attackers for double extortion.

The updated functionality aims to mitigate the growing threat of double-extortion attacks, where cybercriminals not only encrypt files but also steal data to pressure victims into paying a ransom. Once these capabilities are engaged, they remove the leverage that attackers use to extort their victims.

Adlumin's CEO and co-founder, Robert Johnston, remarked on the evolving landscape of ransomware threats. "The ransomware threat has evolved and there are no longer many attacks that rely on encryption alone. Since organizations have implemented strategies like file backups to mitigate against encryption, attackers have changed their tactics to include data theft and using data in nefarious ways to extort their victims," he said.

Johnston highlighted the crucial need for enhanced preventative tools, stating, "Ransomware recovery is a lot easier when you take away an attacker's leverage - that's why we're giving our customers new tools to stop exfiltration and encryption at the earliest stages."

The Ransomware and Exfiltration Prevention feature works by deploying decoy files that attract malicious activity. By closely monitoring these files, the system can swiftly identify and terminate encryption and data exfiltration processes in their initial stages.

Adlumin's current Managed Detection and Response (MDR) service customers have access to the enhanced Ransomware Prevention feature at no extra cost. Extended Detection and Response (XDR) customers who use Adlumin's platform without MDR services now have the option to purchase the Ransomware and Exfiltration Prevention as an add-on.

In addition to the upgraded feature, Adlumin has introduced a free tool for organisations to simulate data exfiltration events and evaluate their current defences against such attacks. This tool, which is downloadable, aims to help organisations assess and improve their security postures.

The company asserts that these combined capabilities offer comprehensive protection, allowing organisations to thwart ransomware gangs from utilising both encryption and exfiltration techniques. According to the press release, Adlumin's existing Ransomware Prevention feature is already effective in saving 99% of files from encryption.