Ransomware Response Consulting Services

Progent's Ransomware Settlement Negotiation Services in Barra da Tijuca
Progent has experience negotiating ransomware settlements with threat actors (TAs). Reaching an optimum settlement is a complex activity that calls for a mix of field experience, IT knowledge and business savvy. It also requires close co-operation with the ransomware victim's IT team and the cyber insurance provider, if there is one. Because the top priority of the ransomware victim is fast recovery, it is vital to deploy recovery teams that operate efficiently, in parallel, and in close communication. Progent offers the breadth of IT skills and the depth of experts to complement your network support team and recover your network environment rapidly and economically.

Services offered by Progent's ransomware settlement experts include:

• Determining the type of ransomware used in the assault
• Identifying and communicating with the hacker
• Assessing the likelihood of recovery
• Testing the hacker's decryption tool
• Determining a settlement payment with the victim and the insurance provider
• Negotiating a settlement and schedule with the TA
• Checking compliance with anti-money laundering regulations
• Overseeing the crypto-currency disbursement to the TA
• Receiving, learning, and using the threat actor's decryption utility
• If needed, contacting the threat actor for technical assistance with the decryptor tool

• Isolating affected endpoints and data stores to prevent further progress of the attack
• Creating replicas of every breached server and endpoint and data store in order to perform forensics without interfering with restoration
• Adding A/V protection to all clean endpoints
• Restoring files from offline restores or uncompromised endpoints
• Creating a clean recovery environment
• Mapping and reconnecting drives to reflect exactly their pre-encryption state

Paying Exfiltration Ransoms
In addition to demanding payment for a decryption tool, modern strains of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Egregor often try to steal (or "exfiltrate") files. TAs are then able to demand an extra settlement in exchange for not publishing this data or selling it. Sadly, there is no way to be certain that stolen data have been totally erased by the hacker. Actually, in numerous instances the TA has limited control over where the information ends up. Settling an exfiltration ransom does not free you from the need for seeking the guidance of privacy lawyers, conducting an inventory of data were compromised, and sending the mandated notifications to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided remote and on-premises IT services across the United States for more than two decades and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes professionals who have been awarded high-level certifications in foundation technologies such as Cisco infrastructure, VMware, and popular distributions of Linux. Progent's cybersecurity consultants have earned internationally recognized certifications including CISA, CISSP-ISSAP, and CRISC. (See certifications earned by Progent consultants). Progent also has top-tier support in financial management and ERP application software. This scope of expertise gives Progent the ability to identify and integrate the undamaged parts of your network following a ransomware assault and reconstruct them quickly into a functioning network. Progent has worked with top insurance providers including Chubb to help businesses clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Services in Barra da Tijuca
To get in touch with Progent about ransomware settlement negotiation services in Barra da Tijuca, phone Progent at 800-462-8800 or go to Contact Progent.