Ransomware Solutions Consultants

Overview of Progent's Ransomware Negotiation Services in Barra da Tijuca
Progent is experienced in negotiating ransomware settlements with hackers. Reaching an acceptable settlement is a complex activity that calls for a combination of field experience, IT skills and business acumen. It also demands working closely with the ransomware victim's IT staff and the cyber insurance carrier, if there is one. Because the top priority of the ransomware target is fast recovery, it is vital to deploy response groups that work efficiently, in parallel, and in close communication. Progent offers the scope of technical knowledge and the depth of personnel to complement your IT support team and recover your network rapidly and affordably.

Services available from Progent's ransomware negotiation team include:

• Establishing the kind of ransomware involved in the attack
• Identifying and contacting the hacker persona
• Evaluating the recovery risk
• Verifying the hacker's decryption tool
• Determining a settlement amount with the victim and the insurance carrier
• Negotiating a settlement amount and timeline with the threat actor
• Verifying adherence to anti-money laundering regulations
• Managing the crypto-currency transfer to the hacker
• Acquiring, learning, and using the hacker's decryption utility
• If needed, contacting the hacker for assistance with the decryption utility

• Isolating affected endpoints to prevent further spread of the assault
• Making digital copies of each infected device and data store in order to perform forensics without interfering with cleanup
• Adding A/V protection to all clean endpoints
• Recovering files from offline restores or unscathed machines
• Creating a clean recovery environment
• Remapping and reconnecting datastores to reflect precisely their pre-attack state

Settling Exfiltration Ransoms
Beyond extorting money for a decryption tool, modern variants of ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Nephilim commonly try to exfiltrate information. Hackers are then able to require an extra payment for not divulging this information on the dark web. Sadly, there is no method to prove that exfiltrated files have been completely deleted by the TA. In fact, in numerous cases the TA has limited say about the disposition of the data. Paying an exfiltration ransom does not free you from the necessity of seeking the advice of legal counsel, performing an inventory of files were taken, and carrying out the necessary alerts to affected entities. In general, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered online and on-premises IT services throughout the United States for over 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of SMEs includes professionals who have been awarded advanced certifications in foundation technology platforms such as Cisco infrastructure, VMware virtualization, and popular distributions of Linux. Progent's cybersecurity experts have earned internationally recognized certifications including CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also offers top-tier support in financial management and Enterprise Resource Planning applications. This scope of expertise allows Progent to identify and consolidate the surviving pieces of your IT environment following a ransomware intrusion and reconstruct them quickly into a viable network. Progent has collaborated with top cyber insurance providers like Chubb to help businesses clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Guidance in Barra da Tijuca
To get in touch with Progent about ransomware settlement negotiation guidance in Barra da Tijuca, phone Progent at 800-462-8800 or go to Contact Progent.