Ransomware Solutions Consulting Experts

Progent's Ransomware Negotiation Consulting in Barra da Tijuca
Progent is experienced in negotiating ransomware settlements with hackers. Reaching an optimum settlement is a complicated exercise that requires a combination of field experience, IT knowledge and business savvy. It also calls for close co-operation with the cyber-extortion target's IT team and the cyber insurance carrier, if there is one. Since the number one priority of the ransomware target is fast recovery, it is vital to establish recovery groups that work efficiently, in parallel, and in close communication. Progent offers the breadth of technical knowledge and the depth of experts to supplement your network staff and recover your network rapidly and economically.

Support provided by Progent's ransomware negotiation team include:

• Determining the type of ransomware involved in the assault
• Identifying and communicating with the hacker
• Evaluating the likelihood of recovery
• Testing the hacker's decryption capabilities
• Agreeing on a settlement with the ransomware victim and the insurance carrier
• Establishing a settlement amount and timeline with the hacker
• Verifying accordance with anti-money laundering sanctions
• Carrying out the crypto-currency transfer to the hacker
• Acquiring, reviewing, and using the hacker's decryptor tool
• If necessary, contacting the threat actor for assistance with the decryptor tool

• Quarantining affected endpoints to prevent further spread of the attack
• Creating replicas of every breached device and data store in order to perform forensics without interfering with cleanup
• Adding anti-virus protection to all virus-free endpoints
• Recovering files from offline restores or unscathed endpoints
• Creating a pristine recovery environment
• Mapping and reconnecting datastores to match exactly their pre-encryption condition

Exfiltration Ransoms
In addition to extorting payment for a decryption tool, current strains of ransomware like Ryuk, Sodinokibi, Netwalker, and Nephilim commonly try to exfiltrate information. TAs are then able to demand an extra settlement in exchange for not divulging this information or selling it. Sadly, there exists no method to be certain that stolen files have been completely deleted by the TA. In fact, in many instances the threat actor has limited control over where the information ends up. Paying an exfiltration ransom does not eliminate the necessity of engaging the advice of privacy lawyers, conducting an audit on which data were taken, and performing the required alerts to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered online and on-premises IT services throughout the United States for over two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes professionals who have earned high-level certifications in foundation technologies such as Cisco infrastructure, VMware virtualization, and popular distributions of Linux. Progent's cybersecurity consultants have earned internationally recognized certifications including CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial and Enterprise Resource Planning application software. This breadth of skills gives Progent the ability to salvage and integrate the surviving parts of your network following a ransomware intrusion and rebuild them rapidly into a viable system. Progent has worked with leading cyber insurance carriers including Chubb to assist organizations clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Services in Barra da Tijuca
To get in touch with Progent about ransomware settlement guidance in Barra da Tijuca, call Progent at 800-462-8800 or go to Contact Progent.