Question for Webroot Security Experts and Ransomware?

@TripleHelix ,

Great questions here! I’m reaching out to our threat/product teams to see if we can get a specialist to create a thorough answer for you. 

-Keenan

That would be great as i said all the years and I asked a couple of times but no true answer and I would like to point others to an answer from Webroot Staff.

Thanks,

Good question Daniel. I’d like to know how good Webroot protects against ransomware on a Mac computer also. Since Webroot has No Rollback feature for Mac.

Bump!

I was talking with @TylerM (thanks for that Tyler btw) about this who had this to say:  

Ransomware has evolved over the years to target victims at multiple different layers, or attack vectors. Webroot offers a unique solution to protect users at each of these different layers, starting with the URL or IP. For example, say a user clicks on a phishing link or URL that deploys malicious payload. Webroot can stop over 99% of threats on this level. Now, let's say that that layer fails and the machine is able to resolve that URL or IP. As the file is downloaded, our massive machine learning database analyzes topical signatures of the file. From there, we're able to quarantine the file before it is executed or does any harm. This is our strongest layer. This last heuristics layer is comparable to the only layer of traditional AV blacklists. We have  improved upon this with multiple layers of protection. 

The best protection from ransomware is backups. Every security software will fail to protect at some point. I have come across a sample that uses the legit (and whitelisted) 7-Zip to encrypt your data and literally all security verndors failed to protect the user files. While I do want to know, as you do, how Webroot works and what layers it has, backups are very necessary to protect your files.

Yes, that’s the final layer of defence if all else fails (both data backup and imaging of disk). Very important!