Intercept X vs Sucylocker Ransomware

Question

Hi, 
 I would like to know if only Intercept X is enough to protect a computer from Cryptolocker v3 and Sucylocker ransomware. 
 If isnt enough, will Central InterceptX Advanced be the solution to fully protect the computer from ransomware? 
 Thanks.

DianneY · Answer

Hello Carlos Raul Leon Quiroga 
 Yes, as mentioned by Shweta , Intercept X should be able to protect your devices because of its behavioral analysis. If it shows certain behavioral patterns similar to what ransomware will do, for example, creating copies of files and then contacting known Command and Control servers, etc., then it should detect this behavior and stop it from occurring. Sending a sample to Sophos Labs will also help us confirm if we protect against specific threats. 
 Also, it is important to ensure that you have set up Intercept X as recommended to prevent Ransomware, see KB below: 
 Ransomware: Prevention advice for Sophos products

Yashraj S · Answer

Hi Carlos Raul Leon Quiroga 
 I completely agree with Shweta and DianneY To further add to it, Sophos Central Intercept X Advanced includes Sophos traditional AV along with Intercept X which means that it will provide layered protection against malware. To answer your questions, 
 1. For "Sucylocker Ransomware", I came across this result - https://maltiverse.com/sample/86e0eac8c5ce70c4b839ef18af5231b5f92e292b81e440193cdbdc7ed108049f . However, I cannot vouch for such results and request you to submit a sample so that experts from Sophos Labs can verify it for you. 
 2. We have an excellent article regarding "CryptoWall Ransomware" showcasing how it infects the machine and how Sophos detects it - https://news.sophos.com/en-us/2015/12/17/the-current-state-of-ransomware-cryptowall/ . The article is quite old and Sophos has been protecting machines against this ransomware for a long time. Once again, I would recommend you submit a sample to Sophos Labs so that you can get the latest information on this if it is a new variant that nobody has ever seen.