Ransomware Solutions Services

Progent's Ransomware Negotiation Services in Barra da Tijuca
Progent is experienced in negotiating ransomware settlements with attackers. Reaching an acceptable settlement is a complicated activity that calls for a mix of field experience, technical knowledge and business acumen. It also requires working closely with the ransomware victim's IT team and the insurance carrier, if there is one. Because the number one priority of the ransomware target is fast recovery, it is vital to establish recovery groups that operate efficiently, concurrently, and with intimate collaboration. Progent has the scope of technical knowledge and the deep bench of experts to supplement your IT support team and restore your network quickly and economically.

Services offered by Progent's ransomware negotiation team include:

• Determining the kind of ransomware used in the assault
• Identifying and contacting the hacker persona
• Evaluating the likelihood of recovery
• Verifying the TA's decryption tool
• Budgeting a settlement payment with the ransomware victim and the insurance provider
• Negotiating a settlement amount and timeline with the hacker
• Confirming compliance with anti-money laundering sanctions
• Overseeing the crypto-currency disbursement to the hacker
• Acquiring, reviewing, and operating the threat actor's decryption mechanism
• If necessary, contacting the threat actor for assistance with the decryptor tool

• Isolating affected endpoints and data stores to arrest the spread of the attack
• Making replicas of every breached server and endpoint and data store in order to perform forensics in parallel with restoration
• Adding anti-virus protection to all clean endpoints
• Salvaging data from offline backups or uncompromised machines
• Building a clean recovery environment
• Mapping and connecting datastores to reflect precisely their pre-attack condition

Exfiltration Ransoms
In addition to extorting money for a decryption utility, modern strains of ransomware like Ryuk, Maze, Netwalker, and Nephilim commonly attempt to exfiltrate information. Hackers are then able to require an additional payment for not publishing this data on the dark web. Unfortunately, there is no method to prove that exfiltrated files have been completely erased by the TA. In fact, in numerous instances the hacker has limited control over the disposition of the data. Paying an exfiltration ransom does not free you from the need for engaging the guidance of privacy lawyers, performing an investigation into which data were stolen, and sending the mandated alerts to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided online and onsite IT services throughout the United States for more than 20 years and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts includes professionals who have earned advanced certifications in foundation technologies such as Cisco networking, VMware, and popular distributions of Linux. Progent's cybersecurity experts have earned internationally recognized certifications including CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has top-tier support in financial and ERP application software. This broad array of expertise gives Progent the ability to salvage and consolidate the surviving pieces of your information system following a ransomware intrusion and rebuild them quickly into a viable network. Progent has worked with top insurance providers including Chubb to assist organizations clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Services in Barra da Tijuca
To get in touch with Progent about crypto-ransomware settlement negotiation expertise in Barra da Tijuca, call Progent at 800-462-8800 or go to Contact Progent.