Ransomware Solutions Consulting Services

Progent's Ransomware Negotiation Services in Barra da Tijuca
Progent has experience negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complex activity that calls for a mix of field experience, IT skills and business savvy. It also requires working closely with the cyber-extortion target's IT team and the insurance provider, if any. Since the number one priority of the ransomware victim is operational continuity, it is critical to establish response teams that work effectively, concurrently, and with intimate collaboration. Progent offers the scope of technical knowledge and the deep bench of experts to supplement your IT staff and recover your network environment quickly and affordably.

Services offered by Progent's ransomware negotiation experts include:

• Determining the type of ransomware involved in the assault
• Making contact with the hacker persona
• Assessing the recovery risk
• Validating the TA's decryption tool
• Deciding on an acceptable settlement payment with the ransomware victim and the cyber insurance provider
• Negotiating a settlement and timeline with the threat actor
• Checking compliance with anti-money laundering sanctions
• Managing the crypto-currency disbursement to the TA
• Receiving, learning, and operating the threat actor's decryption utility
• If necessary, contacting the TA for technical help with the decryption tool

• Isolating affected endpoints to prevent further spread of the assault
• Creating replicas of every infected server and endpoint and data store in order to perform forensics in parallel with restoration
• Adding anti-virus agents to all virus-free endpoints
• Salvaging data from offline backups or uncompromised machines
• Creating a pristine environment
• Mapping and connecting datastores to match exactly their pre-encryption condition

Settling Exfiltration Ransoms
Beyond demanding payment for a decryption tool, modern variants of crypto-ransomware like Ryuk, Maze, Netwalker, and Egregor commonly try to steal (or "exfiltrate") files. Hackers are then able to demand an additional settlement in exchange for not divulging this information or selling it. Unfortunately, there is no way to guarantee that stolen files have been totally erased by the threat actor. In fact, in many instances the TA has little control over who can access the stolen files. Paying an exfiltration ransom does not free you from the necessity of seeking the guidance of privacy lawyers, performing an inventory of data were stolen, and performing the required alerts to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered online and on-premises IT services across the United States for more than two decades and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes consultants who have earned high-level certifications in foundation technology platforms such as Cisco networking, VMware virtualization, and major Linux distros. Progent's data security experts have earned industry-recognized certifications including CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also has top-tier support in financial and ERP applications. This breadth of expertise allows Progent to salvage and integrate the surviving parts of your network after a ransomware attack and rebuild them rapidly into a viable network. Progent has worked with top cyber insurance carriers like Chubb to help businesses recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Barra da Tijuca
To get in touch with Progent about ransomware settlement guidance in Barra da Tijuca, call Progent at 800-462-8800 or go to Contact Progent.