Ransomware Solutions Consulting Experts

Overview of Progent's Ransomware Negotiation Services in Brisbane
Progent has experience negotiating ransomware settlements with threat actors (TAs). Reaching an acceptable settlement is a complex exercise that requires a mix of field experience, technical knowledge and business savvy. It also requires working closely with the ransomware victim's IT team and the cyber insurance carrier, if any. Because the top goal of the ransomware target is operational continuity, it is critical to deploy response groups that work efficiently, concurrently, and with intimate collaboration. Progent offers the breadth of IT skills and the depth of experts to supplement your IT staff and recover your network quickly and economically.

Support offered by Progent's ransomware settlement negotiation team include:

• Determining the kind of ransomware involved in the attack
• making contact with the hacker
• Evaluating the recovery risk
• Testing the TA's decryption tool
• Budgeting a settlement range with the victim and the insurance provider
• Establishing a settlement amount and timeline with the hacker
• Checking accordance with anti-money laundering sanctions
• Carrying out the crypto-currency transfer to the TA
• Acquiring, reviewing, and operating the TA's decryptor utility
• If needed, contacting the hacker for technical help with the decryptor tool

• Quarantining infected endpoints and data stores to prevent further progress of the attack
• Making digital copies of each breached server and endpoint and data store in order to perform forensics without interfering with restoration
• Installing A/V agents to all clean endpoints
• Recovering files from offline backups or unscathed endpoints
• Creating a clean environment
• Mapping and connecting datastores to match exactly their pre-encryption condition

Exfiltration Ransoms
In addition to demanding money for a decryption utility, modern variants of ransomware like Ryuk, Sodinokibi, DopplePaymer, and Nephilim often attempt to exfiltrate files. Hackers can then require an extra ransom for not posting this data or selling it. Sadly, there exists no way to prove that exfiltrated data have been completely erased by the threat actor. In fact, in many cases the hacker has limited control about data custody. Paying an exfiltration ransom does not free you from the need for getting the advice of privacy attorneys, performing an inventory of data were stolen, and performing the mandated notifications to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered online and on-premises IT services across the United States for more than 20 years and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes professionals who have earned advanced certifications in core technology platforms such as Cisco infrastructure, VMware virtualization, and popular distributions of Linux. Progent's cybersecurity experts have earned industry-recognized certifications such as CISA, CISSP, and GIAC. (Refer to certifications earned by Progent consultants). Progent also offers top-tier support in financial and ERP applications. This scope of expertise gives Progent the ability to identify and integrate the surviving pieces of your information system following a ransomware assault and rebuild them rapidly into an operational network. Progent has worked with leading cyber insurance providers like Chubb to help businesses recover from ransomware attacks.

Contact Progent about Ransomware Settlement Expertise in Brisbane
To get in touch with Progent about ransomware settlement services in Brisbane, phone Progent at 800-462-8800 or go to Contact Progent.